Overview
This article outlines two methods for automatically flagging emails with specific subject lines as spam within the Warden interface. Select the approach that best aligns with your filtering requirements and administrative preferences.
Method 1: Using the WhitelistSubject/WelcomeListSubject Plugin
The most direct method is to utilize the blacklist functionality of the WhitelistSubject/WelcomeListSubject plugin. This configuration automatically applies a spam score of 100 or higher to any email matching your specified subject line.
- Navigate to Warden > Settings > Plugins Settings > WhitelistSubject/WelcomeListSubject.
- In the Blacklist/Blocklist subject field, enter the exact subject line or keyword you wish to block.
- Click Update to save your configuration.

Method 2: Creating a Custom Rule
For advanced filtering scenarios, you can implement a custom rule to match specific subject lines. This method provides granular control over scoring thresholds and matching behavior.
- Navigate to Warden > Rules, then click Add to create a new custom rule.
- In the template selection dropdown, choose Header - Subject - Matches - Word. For comprehensive details on rule configuration, refer to the official documentation.
- Configure the following parameters:
- Name: Enter a descriptive identifier for the rule. Rule names must not exceed 22 characters.
- Score: Assign a numerical value to determine filtering action. Use a score of
100or higher to automatically classify matching emails as spam.
- Click Update to apply the rule.

Troubleshooting and Common Issues
- Rule Name Validation: Ensure custom rule names remain under 22 characters to prevent save failures or truncation errors.
- Scoring Thresholds: Verify that your assigned score meets or exceeds the system's spam threshold (typically 100) to guarantee proper classification and routing.
- False Positives: Both methods utilize exact or keyword matching. Periodically review quarantined or filtered messages to adjust entries if legitimate correspondence is incorrectly flagged.