Selamat pagi pak,
Berikut ada email dari user, saya sudah block di CF subject yg mengandung
'penis',
tapi spam ini ubah dari "subjek", ke "from". Ada cara lain yg bisa block?
Saat ini saya sudah add CF, dengan blok kata 'penis' dari "if from Header
contain".
Apakah ini sudah cukup pak?

Berikut saya sertakan emailnya dan internet header: 

From: Mega [mailto:m...@quiksilver.co.id] 
Sent: Tuesday, June 14, 2011 9:36 AM
To: 'Made Agus Sudana'
Subject: FW: Cumming has never been stronger

X-MDAV-Processed: mail.quiksilver.co.id, Tue, 14 Jun 2011 05:17:31 +0800
Return-path: <asphyxiatear...@wixgame.com>
Received: from mail1.quiksilver.co.id ([172.29.1.4])
            by mail.quiksilver.co.id (mail.quiksilver.co.id [172.29.0.2])
            (MDaemon PRO v12.0.3)
            with ESMTP id md50002953677.msg
            for <m...@quiksilver.co.id>; Tue, 14 Jun 2011 05:17:30 +0800
X-Spam-Processed: mail.quiksilver.co.id, Tue, 14 Jun 2011 05:17:30 +0800
            (not processed: message from trusted or authenticated source)
X-Rcpt-To: m...@quiksilver.co.id
X-MDRcpt-To: m...@quiksilver.co.id
X-MDRemoteIP: 172.29.1.4
X-Return-Path: asphyxiatear...@wixgame.com
X-Envelope-From: asphyxiatear...@wixgame.com
X-MDaemon-Deliver-To: m...@quiksilver.co.id
X-MDAV-Processed: mail1.quiksilver.co.id, Tue, 14 Jun 2011 04:17:36 +0700
X-Spam-Processed: mail1.quiksilver.co.id, Tue, 14 Jun 2011 04:17:36 +0700
X-Spam-Level: 
X-Spam-Status: No, score=-95.8 required=5.0
tests=BAYES_50,FSL_HELO_NON_FQDN_1,
           
HELO_NO_DOMAIN,HTML_MESSAGE,MDAEMON_OP_SPAM_HIGH,USER_IN_WHITELIST_TO
            shortcircuit=no autolearn=no version=3.3.1
X-Spam-Report: 
            *  0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
            *  2.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
            * -100 USER_IN_WHITELIST_TO address is listed in 'whitelist_to'
            *  0.0 HTML_MESSAGE BODY: HTML included in message
            *  1.6 BAYES_50 BODY: Bayes spam probability is 40 to 60%
            *      [score: 0.5000]
            *  0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16)
Received: from djdrim (234-82.thezone.bg [85.217.234.82])
            by mail1.quiksilver.co.id (mail1.quiksilver.co.id [172.29.1.4])
            (MDaemon PRO v12.0.1)
            with ESMTP id md50000747558.msg
            for <m...@quiksilver.co.id>; Tue, 14 Jun 2011 04:17:35 +0700
Authentication-Results: mail1.quiksilver.co.id
            x-ip-helo=pass smtp.helo=djdrim (ip=85.217.234.82);
            x-ip-mail=pass smtp.mail=asphyxiatear...@wixgame.com
(ip=85.217.234.82)
Received: (qmail 5976 by uid 976); Tue, 14 Jun 2011 00:16:04 -0200
From: "Penis Growth Sample" <asphyxiatear...@wixgame.com>
To: <i...@quiksilver.co.id>
Cc: <m...@quiksilver.co.id>,
            <e...@quiksilver.co.id>,
            <su...@quiksilver.co.id>
Subject: Cumming has never been stronger
Date: Mon, 13 Jun 2011 23:33:54 -0200
Message-ID: <006001cc2a28$7e227e70$7a677b50$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
            boundary="----=_NextPart_000_005F_01CC2A28.7E227E70"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acjgs9D7Vtg0eTbwPNNc3v6O/8bObQ==
Content-Language: en-us


Regards
Mega Putri
 
________________________________________
From: Penis Growth Sample [mailto:asphyxiatear...@wixgame.com] 
Sent: Tuesday, June 14, 2011 9:34 AM
To: i...@quiksilver.co.id
Cc: m...@quiksilver.co.id; e...@quiksilver.co.id; su...@quiksilver.co.id
Subject: Cumming has never been stronger

Give her the best experience nightly
http://largecockk.com/


--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: <http://www.netmeister.org/news/learn2quote>
Arsip: <http://mdaemon-l.dutaint.com>
Dokumentasi : <http://mdaemon.dutaint.co.id>
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 12.0.3, SP 4.1.3, OC 2.2.7, SG 2.0.6, PP 2.0.0

Kirim email ke