This is perhaps a bit of a philosophical question as well as a practical one.

 

I have users sending me back mail that did not get trapped as SPAM which it obviously is. Now when I look it up some of this stuff scores really low (like 20 to 50% of the tag weight). It may not be on any blacklist, it may have minimal text (mostly downloaded pictures) and so I do not catch it. I see that I have a few options

 

1)       Blacklist it by sender but that is probably mostly a waste of time since the sender gets spoofed and changes

2)       Do nothing and hope that it appears on more DNS tests so that it will trip more test and then get caught (not a great option)

3)       Consider blacklisting the IP but that may not be possible if it is a major e-mail server or may not be possible if it is a zombie

4)       Look for specific words/phrases in the body, subject etc and try filtering on that

5)       Something else, anything else??

 

It seems to me that these are my options and none of them seem really definitive. Now maybe I am looking for something that doesn’t exist but I thought I would ask here what others do.

 

Any suggestions, thoughts etc would be appreciated.

 

Thanx

 

 

     Goran Jovanovic

     The LAN Shoppe

 

 

<<image001.gif>>

Reply via email to