Yep, I agree with Kevin. Using CONTAINS will trap a lot of legitimtate emails.
Scott posted a good filter to use if using DECLUDE and the external tests he mentioned. -Erik ---------- Original Message ---------------------------------- From: "Kevin Bilbee" <[EMAIL PROTECTED]> Reply-To: Declude.JunkMail@declude.com Date: Tue, 6 Dec 2005 12:55:24 -0800 >Contains will trap too many legitimate emails that embed images. > >Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of John Carter > Sent: Tuesday, December 06, 2005 12:35 PM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] CBL:Fw: news > > > May wish to consider CONTAINS instead of BEGINSWITH. This is one I just >got. > > John C > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> > <HTML><HEAD> > <META http-equiv=Content-Type content="text/html; charset=us-ascii"> > <META content="MSHTML 6.00.2800.1106" name=GENERATOR> > <STYLE></STYLE> > </HEAD> > <BODY bgColor=#ffffff> > <DIV> </DIV> > <DIV><A href="http://www.persorela.com">http://www.persorela.com</A></DIV> > <DIV><IMG src="cid:000101c5faa3$244e631d$b821a8c0@shyer"></DIV> > <DIV> </DIV> > <DIV>Crow: My good Crow, your voice is right enough, but your wit is<BR> > wanting. <BR> > The Two Dogs <BR> > A MAN had two dogs: a Hound, trained to assist him in his sports,<BR> > and a Housedog, taught to watch the house. When he returned home<BR> > after a good days sport, he always gave the Housedog a large<BR> > share of his spoil. The Hound, feeling much aggrieved at this,<BR> > reproached his companion, saying, It is very hard to have all<BR> > this labor, while you, who do not assist in the chase, luxuriate<BR> > on the fruits of my exertions. The Housedog replied, Do not<BR> > blame me, my friend, but find fault with the master, who has not<BR> > taught me to labor, but to depend for subsistence on the labor of<BR> > others. </DIV></BODY></HTML> > > > >---------------------------------------------------------------------------- >-- > From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee > Sent: Tuesday, December 06, 2005 1:55 PM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] CBL:Fw: news > > > We use a body filter > > BODY 15 BEGINSWITH <img src=3Dcid: > > This puts the message at our hold weight. I have not seen one false >positive from this test. > > > Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of Richard Farris > Sent: Tuesday, December 06, 2005 11:25 AM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] CBL:Fw: news > > > Does anyone have an answer to filter these type emails? > > Richard Farris > Ethixs Online > 1.270.247.5555 Office > 1.800.548.3877 Tech Support > "Crossroads to a Cleaner Internet" > > ----- Original Message ----- > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Sent: Tuesday, December 06, 2005 3:20 AM > Subject: news > > > > > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.