The work as expected and resulting messages have the spam header added:
After all these filters I have a scripted filter which copies to the Quarantine Folder all messages with attachments that haven't been marked as SPAM.
This is so I can check the MTA log to see if any zipped executables are getting through.
Code: Select all
FilterResult=0 If ([ME_SENDERAUTH] = 0) Then If ([ME_HASANATTACHMENT] = 1) Then If NOT CriteriaMet([ME_HEADERS_CONTAIN],"*X-ME-Content: Deliver-To=Junk*") Then FilterResult=1 x = CriteriaMet([ME_HEADERS_CONTAIN],"*X-ME-Content: Deliver-To=Junk*") MEResultData = "UnJunked ZIP. Check quarantined copy. (%SUBJECT%)(" & x & ")" End If End If End If
03/10/16 12:18:05 Executed D2B191AA1D944307B2FEE4B59B3058B0.MAI SMTP ZIP Attachments NOT Junked (see Quarantine) COPY_TO_QUARANTINE [SMTP:firstname.lastname@example.org] 188.8.131.52 UnJunked ZIP. Check quarantined copy. (Attached Image)(False) Attached Image
Any idea why ?