antivirus.exim filters

a few weeks back I found here some filters for antivirus.exim when sobig.f was going crazy. I lost the info and need your help if anyone can show me how to put a simple filter in antivirus.exim saying that if any 'header' or 'body' contains, say, yahoo@yahoo.com to black hole it.

I remember something like:

If (don't remmeber the exact wording) header contains "yahoo@yahoo.com"
or ...... body(?) contains yahoo@yahoo.com
then
seen finish

thanx for your help guys

 

 

 

 

Top