Tweaking Xamime Tests

In Xamime you can have any number of tests within acl's. of course with more tests you will experience a higher load on the sytem while messages are processed.
In some cases "Text String Tests" will search attachment data for strings. On big attachments this can put unnecessary load on the server. (i.e. when an attachment is processed it looks like a text file full of junk, in raw format. If your looking for a string particular string, it will look in this attachment data, which is not necessary, and potentially block legitimate data).

You can limit tests to only search in the header and or body. 

When you add a test add a +h before it for header only, or a +b for body only. You can use a combination of +h+b

Thus....the Text String Test for the word "viagra" should read as follows....
1. Search body and header only.       Test Type: Text String Test       Comment: Viagra Word Test       Text String: +b+hviagra
or
2. Search body only.      Test Type: Text String Test      Comment: Viagra Word Test      Text String: +bviagra
or
3. Search header only.      Test Type: Text String Test      Comment: Viagra Word Test      Text String: +hviagra
You could do this on other tests if you were only looking for strings in body or header or both and wanted to stop it processing attachments unnecessarily.

Also note if your looking for special characters, like "|" you need to escape them with a backslash to see them literally, not as a special character. i.e.
     Test Type: Text String Test      Comment: Pipe Test      Text String: +b|
4. Recently a lot of spam has been coming in with  apostrophe's in the friendly sender address. This impacts on xamime calling spamc-filter because parameters are separated by " ' ". hence no spam rules get applied. Because this is not a nromal thing to do you can add a rule to automatically delete anything with an " ' " in the sender address. 
     Test Type: Sender Test      Comment: Apostrophe in Sender      Text String: .*'.*

other Xamime Related Tips...