#exim.conf

system_filter = /etc/exim/antiphish

#antiphish

if first_delivery
and ( ("$h_to:" contains "helpdesks@w.cn")
)
then
unseen deliver "support@ourdomain.tld"
fail
endif