Yep, I agree with Kevin.  Using CONTAINS will trap a lot of legitimtate emails.

Scott posted a good filter to use if using DECLUDE and the external tests he 
mentioned.

-Erik



---------- Original Message ----------------------------------
From: "Kevin Bilbee" <[EMAIL PROTECTED]>
Reply-To: Declude.JunkMail@declude.com
Date:  Tue, 6 Dec 2005 12:55:24 -0800

>Contains will trap too many legitimate emails that embed images.
>
>Kevin Bilbee
>  -----Original Message-----
>  From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of John Carter
>  Sent: Tuesday, December 06, 2005 12:35 PM
>  To: Declude.JunkMail@declude.com
>  Subject: RE: [Declude.JunkMail] CBL:Fw: news
>
>
>  May wish to consider CONTAINS instead of BEGINSWITH.  This is one I just
>got.
>
>  John C
>
>  <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
>  <HTML><HEAD>
>  <META http-equiv=Content-Type content="text/html; charset=us-ascii">
>  <META content="MSHTML 6.00.2800.1106" name=GENERATOR>
>  <STYLE></STYLE>
>  </HEAD>
>  <BODY bgColor=#ffffff>
>  <DIV> </DIV>
>  <DIV><A href="http://www.persorela.com";>http://www.persorela.com</A></DIV>
>  <DIV><IMG src="cid:000101c5faa3$244e631d$b821a8c0@shyer"></DIV>
>  <DIV> </DIV>
>  <DIV>Crow:  My good Crow, your voice is right enough, but your wit is<BR>
>  wanting.  <BR>
>  The Two Dogs <BR>
>  A MAN had two dogs:  a Hound, trained to assist him in his sports,<BR>
>  and a Housedog, taught to watch the house.  When he returned home<BR>
>  after a good days sport, he always gave the Housedog a large<BR>
>  share of his spoil.  The Hound, feeling much aggrieved at this,<BR>
>  reproached his companion, saying, It is very hard to have all<BR>
>  this labor, while you, who do not assist in the chase, luxuriate<BR>
>  on the fruits of my exertions.  The Housedog replied, Do not<BR>
>  blame me, my friend, but find fault with the master, who has not<BR>
>  taught me to labor, but to depend for subsistence on the labor of<BR>
>  others.  </DIV></BODY></HTML>
>
>
>
>----------------------------------------------------------------------------
>--
>  From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
>  Sent: Tuesday, December 06, 2005 1:55 PM
>  To: Declude.JunkMail@declude.com
>  Subject: RE: [Declude.JunkMail] CBL:Fw: news
>
>
>  We use a body filter
>
>  BODY 15 BEGINSWITH <img src=3Dcid:
>
>  This puts the message at our hold weight. I have not seen one false
>positive from this test.
>
>
>  Kevin Bilbee
>    -----Original Message-----
>    From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Richard Farris
>    Sent: Tuesday, December 06, 2005 11:25 AM
>    To: Declude.JunkMail@declude.com
>    Subject: [Declude.JunkMail] CBL:Fw: news
>
>
>    Does anyone have an answer to filter these type emails?
>
>    Richard Farris
>    Ethixs Online
>    1.270.247.5555 Office
>    1.800.548.3877 Tech Support
>    "Crossroads to a Cleaner Internet"
>
>    ----- Original Message -----
>    From: [EMAIL PROTECTED]
>    To: [EMAIL PROTECTED]
>    Sent: Tuesday, December 06, 2005 3:20 AM
>    Subject: news
>
>
>
>
>


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to