I was trying to set a file extension based filter in exim.
if $message_body contains "pdf.gz" or $message_body contains "pdf.arj"
This filter does work on small mail, such as mail with only test data and one spam attachment like test.pdf.gz
but when it comes to actual scenario, when a mail with much data (This spam mail generally contains a legitimate company name and images some ivoices and attachments like gz and arj archives.) and it doesnt blocks it!
Is there any email size limit for filtering? I even searched for such option in exim configuration with no luck.
help i need this soon.