On Mon, 2016-02-01 at 13:48 +0100, Thomas Barth wrote: > Hi, > for a week or so I get a lot of mails with bills as doc-documents and > Spamassassin is actually not able to mark it as spam. The documents > contain a macro. AMaVis is configured to reject all spam-mails > directly > (no store&forward). How can I configure Spamassassin to mark all > mails > with doc-documents attached as spam? > Install the MimeMagic plugin if you haven't already done so. This lets you write rules against an attachment's Mime header, for instance to recognise *.doc filenames, and to detect mismatches between the content type and the file name. You can also use normal body rules to inspect the contents of an attachment.
Martin
