[exim] Need to write an outing drop spam rule [Mailer-Daemon@doctor.nl2k.ab.ca: Mail delivery failed: returning message to sender]

[The Doctor via Exim-users]

Symptoms:

----- Forwarded message from Mail Delivery System 
<mailer-dae...@doctor.nl2k.ab.ca> -----

Date: Mon, 07 Jan 2019 23:28:02 -0700
From: Mail Delivery System <mailer-dae...@doctor.nl2k.ab.ca>
To: w...@doctor.nl2k.ab.ca
Subject: Mail delivery failed: returning message to sender

This message was created automatically by mail delivery software.


Reporting-MTA: dns; doctor.nl2k.ab.ca

Date: Mon, 07 Jan 2019 14:54:58 -0700
From: Net Flix <notificat...@inc-cc.netflix.com>
To: carolineche...@wanadoo.fr
Subject: [ Notification ]  Please update your payment details.


<div style="padding: 10px 0 10px 0;"></div>
<p></p>
<div style="margin: 0 auto; max-width: 500px; min-width: 320px;">
<div style="background-color: #ffffff; border-radius: 5px;">
<div style="text-align: left; color: #696767; font-size: 14px; line-height: 
19px; font-family: Verdana, Geneva, sans-serif; max-width: 600px; min-width: 
320px;">
<div style="margin-left: 22px; margin-right: 20px; text-align: center; 
padding-top: 5px;"><img 
src="https://www.theinquirer.net/w-images/bc50f270-d0e6-4ffc-b482-b2c0b73b4d93/0/netflixlogoredonwhite-580x358.png";
 alt="" width="356" height="220" /><br />
<h1 style="font-weight: normal; color: #3e4751; font-size: 22px; font-family: 
Ubuntu,sans-serif; text-align: center; top: 20px; position: relative;"></h1>
<h1 style="text-align: left;"><span style="color: #000000;">Your 
suspension</span></h1>
<h1 style="text-align: left;"><span style="color: 
#000000;">notification</span></h1>
<p></p>
</div>
<div style="margin-left: 20px;"><strong><span style="color: 
#000000;">&nbsp;Dear User,</span></strong></div>
<div style="margin-left: 20px;"></div>
<div style="margin-left: 20px;"><br />We were unable to validate your billing 
information for the next billing cycle of your subscription thereforce we'il 
suspend your membership if we do not receive a reponse from you within 
48hours.</div>
<div style="margin-left: 20px;">&nbsp;</div>
<div style="margin-left: 20px;">Obviously we'd love to have you back, simply<br 
/>click Restart Your Membership to update your details<br />and continue to 
enjoy all the best TV shows &amp;<br />movies without interruption.</div>
<div style="margin-left: 20px;"></div>
<div style="margin-left: 20px;"><img src="https://image.ibb.co/eMei6V/net.png"; 
alt="" width="426" height="12" /></div>
<div style="margin-left: 20px; margin-right: 20px;"><a style="color: #e50008;" 
href="https://www.kopron.com/inc/AuthBrowse/";>RESTART MEMBERSHIP</a></div>
<div style="margin-left: 20px; margin-right: 20px;">
<p><strong>We're here to help if you need it. Visit the<span 
style="text-decoration: underline;"> <span style="color: #00ffff; 
text-decoration: underline;">Help</span></span></strong><br /><strong><span 
style="text-decoration: underline;"><span style="color: #00ffff; 
text-decoration: underline;">Center</span></span> for more info or <span 
style="text-decoration: underline;"><span style="color: #00ffff; 
text-decoration: underline;">contact us </span></span></strong></p>
<p><img src="https://image.ibb.co/jYbkLq/4.png"; alt="" width="150" height="20" 
/></p>
</div>
</div>
</div>
</div>
<p></p>


----- End forwarded message -----

How can I build an internal spam filter dropping such a message being sent from 
www

AND 

locate the original spam source being used by script ?  A form of mail script?

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on Atheism
Birthdate: 29 Jan 1969 Redhill, Surrey, England, UK

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/