filter spam bounces

[jo...@gmx.net]

Hi! 
 
Spamassassin: 3.0.2 
System: Debian sarge 
 
I want to filter spam bounces. 
The problem is the __BEC_SPAM_H and __BEC_SPAM_B rule will not trigger if 
the bounce is a mime-mail with the original spam attached (subject only in  
attachment). 
How can I tell spamassassin to check the headers from attached mails also? 
 
body   __BEC_SPAM_B    /(?:spamcrap|other spamtext)/i 
header __BEC_SPAM_H    Subject =~ /(?:spamcrap|other spamtext)/i 
header __BEC_ISBOUNCE  From =~ /(?:MAILER-DAEMON|postmaster)/i 
meta   T_SPAM_BOUNCE   ( (__BEC_SPAM_H || __BEC_SPAM_B) + __BEC_ISBOUNCE 
== 2) 
describe T_SPAM_BOUNCE spam bounce 
 
tested with this message:

--------------------------------------------------------------------------------------------------------------------------------------

From: postmaster@dic-online.at 
To: agm@nerdberg.org 
Date: Fri, 20 May 2005 13:53:10 +0200 
MIME-Version: 1.0 
Content-Type: multipart/report; report-type=delivery-status; 
        boundary="9B095B5ADSN=_01C55AF34611F76400000B30exchange.DIC.loc" 
X-DSNContext: 335a7efd - 4458 - 00000001 - 80040546 
Message-ID: <i0...@exchange.DIC.local> 
Subject: Benachrichtung 
        zum 
        =?unicode-1-1-utf-7?Q?+ANw-bermittlungsstatus 
        (Fehlgeschlagen)?= 
 
This is a MIME-formatted message. 
Portions of this message may be unreadable without a MIME-capable mail  
program. 
 
--9B095B5ADSN=_01C55AF34611F76400000B30exchange.DIC.loc 
Content-Type: message/rfc822 
 
Received: from beciq.at [195.149.221.187] by smtp2.funkwan.net 
  (SMTPD32-8.15) id ACF21960116; Fri, 20 May 2005 13:41:38 +0200 
From: agm@nerdberg.org 
To: qmail@wefwfe.at 
Date: Fri, 20 May 2005 11:46:48 UTC 
Subject: spamcrap 
Importance: Normal 
MIME-Version: 1.0 
Content-Transfer-Encoding: 7bit 
Content-Type: text/plain; charset="us-ascii" 
 
... spam ... 
 
--9B095B5ADSN=_01C55AF34611F76400000B30exchange.DIC.loc-- 

-- 
Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie!
Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl