Creating A Rule (OT)

Thu May 6 09:30:34 IST 2004

I keep recieving many emails as follows with random subjects, titles and body text such as :-

Received: from xxx.xxxx.xx.xx ([xxx.xxx.xxx.xxx]) by xxx.xxxx.xx.xx with Microsoft SMTPSVC(5.0.2195.6713);
  Thu, 6 May 2004 08:45:42 +0100
Received: from xxx.xxxx.xx.xx (xxx.xxxx.xx.xx [xxx.xxx.xxx.xxx])
 by mailhost.jobsite.co.uk (8.12.8/8.12.8) with ESMTP id i467pvCR024857;
 Thu, 6 May 2004 08:52:20 +0100
Received: from fl-edad-u1-c6a-172.miamfl.adelphia.net (Timothy36 at fl-edad-u1-c6a-172.miamfl.adelphia.net [24.53.201.172] (may be forged))
 by relay1.jobsite.co.uk (8.12.6-20030919/8.12.6) with SMTP id i467u5et000774;
 Thu, 6 May 2004 08:56:17 +0100 (BST)
Message-Id: <200405060756.i467u5et000774 at xxx.xxx.xxx.xxx>
Received: from 112.148.216.134 by 24.53.201.172; Fri, 07 May 2004 11:45:43 +0200
From: "Maria Bailey" <suzut at geocities.co.jp>
Reply-To: "Maria Bailey" <takeshi at with.ad.jp>
To: jobsite-vac at xxxx.co.uk
Subject: don't publish them please  andean
Date: Fri, 07 May 2004 14:46:43 +0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--3345142437071427381"
X-jsgroup-MailScanner-Information: Please contact Technical Support for more information
X-jsgroup-MailScanner: Found to be clean
X-MailScanner-From: t91344yh at sfc.keio.ac.jp
Return-Path: t91344yh at sfc.keio.ac.jp
X-OriginalArrivalTime: 06 May 2004 07:45:43.0024 (UTC) FILETIME=[22559700:01C4333E]

----3345142437071427381
Content-Type: text/html;
Content-Transfer-Encoding: 7Bit

<html><table border="1" width="11%" bgcolor="#CF2D73" height="79">  <tr><td width="100%" height="73"><p align="center"><a href="http://phne%2Esite%2Evoila%2Efr/FreeTeenMovies.exe"><img border="0" src="http://phne%2Esite%2Evoila%2Efr/f.jpg?women" width="145" height="273"></a>
      <p align="center"><a href="http://phne%2Esite%2Evoila%2Efr/FreeTeenMovies.exe"></a></td></tr></table><br><br><br>club admonition infusion comport celia helene cent packard
waterline bloc societal elmer kaleidescope afterward brazzaville blutwurst
      compensable gallberry incorrect giuliano isopleth wilcox classmate swordfish
basin unanimous warmonger darn accede jejunum alewife porcine
veranda bryozoa threefold reese barrier presuppose bromley propeller apprehensive suffer sorption
      palazzo berne shearer catalysis analogy budapest toolsmith cleveland
tipsy bee prosper machiavelli geld providential palmate offhand
eyeful peptide affable coffeecup courteous clubhouse regis crop deathward capillary snow
      duopolist laughingstock formant napkin garter waveform indwell laxative
foss address perth gaggle laity crosshatch triplett adjoin
paddy demigod convex flatworm seek whisper brookline stepchild demurring egret pillage
      responsive simplify visor annuli bimetallism mild algenib tarpaulin
rwanda excisable kinesthesis osha rose asexual grandchild floodgate
heart tasteful inelastic narrow anthropogenic lounsbury coxcomb schizomycetes</html>

----3345142437071427381--

The only common thing with all these mails is that the url contains links to site%2Evoila%2Efr or site.voila.fr how can I create a custom rule to block these messages ?

Thanks

Mike

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html