Spam filter question

[cybercrone]

I am getting emails from a particular spammer every day with the return address being my own domain and some nonsense word as user. Each day the user name is different. I can't disable the catchall mailbox because I have not set up mailboxes for all the different user names I use, there are far too many of them (bad idea, but it's too late now, I did this years ago). The subject line also changes every day, so I can't filter on that either. Body is all html and as far as I know, can't flter that. the only consistent thing in the email is the name Viagra [R mark] Official Site, but I don't see anyway to filter on that.

Is there a solution to this?

[Tom E.]

If they are the same messages I've been seeing, I trap them with this simple filter:condredirect spam@yourdomain.com sh -c '822field from | grep -qi viagra'
This sends them to my spam account to check for false positives.

Once you're confident it works properly, you can delete them with:
if 822field from | grep -qi viagra; then exit 99; fi

[cybercrone]

Thanks, Tom! Does this code go in Custom Filters? If so, in the first box do I select Simple filter or Process?

[Tom E.]

Yup - Custom Filters; Simple Filter.

The messages I was getting were from something like"Viagra blah blah" <somebody@mydomain.com> and I haven't seen one since setting up the filter.

[cybercrone]

Yeah, that's exactly what I'm getting. I'll let you know if it works for me--I don't see why it shouldn't, if it works for you.

Toni