You could use a LOCAL.txt file which is separate from the standard Declude filters so when filters are updated you don't have to worry about your individual changes. You can also increase the weights on the ME.
David Barker Mail's Best Friend Email : <mailto:[email protected]> [email protected] Web : <http://www.mailsbestfriend.com/> www.mailsbestfriend.com Office : 866.919.2075 cid:[email protected] From: [email protected] [mailto:[email protected]] On Behalf Of Carl Wagar Sent: Wednesday, April 23, 2014 9:50 AM To: [email protected] Subject: [MBF]spam from .me domains. Has anyone witnessed a large increase in spam coming from address in .ME domains and containing links to .ME domains? It looks to me like some (expletive) hacker has found a way to hack a registrar for .ME domains to create them like crazy and is blasting a lot of spam. Although MOST of it is detected by SNIFFER, about 10 percent does not, and the combination of BHL and other filters do not get it over my threshold to HOLD. I have changed the FILTER-COUNTRY to boost the weight of .ME domain (anyone unfortunate enough to send legitimate mail from there is out of luck) but I had to raise the MAXWEIGHT. I expect this is not the best place to put it. Comments? Carl J. Carl Wagar EntreNet Communications Inc www.entrenet.com www.thehostingservice.com 24 Swain Ave, Ottawa, ON, K1G 4T1, Canada Email: [email protected], skype: jcwagar Tel: +1 613-737-7327, Fax: +1 613-737-5801 Cel: +1 613-818-8898 From: [email protected] [mailto:[email protected]] On Behalf Of Dave Beckstrom Sent: Tuesday, April 22, 2014 5:42 PM To: [email protected] Subject: [MBF]Smartermail / Declude and attachments I have a customer who about once a month will suddenly say they aren't receiving emails that have attachments. They claim the file sizes are well below their max message size limit. Is there a way to whitelist any email to them that has an attachment? As far as I know, declude doesn't look at the attachments. We have no virus scanner and virus scanning in declude is disabled. But at this point, I'd like to pass through anything with an attachment and they can deal with the spam. Any ideas?
