Interesting to hear what others are doing. I have an e-mail account that exists solely so that people who see our web site can write to us. Spammers seem to harvest e-mail addresses from web pages, and some of the viruses and worms around are evidently written to grab addresses off web pages that the unsuspecting person with the infected computer has visited, and mail to them as well. So I get a LOT of e-mails there that I'm guessing are generated by the Klez or SirCam viruses. I've written a rule that sends all messages where "Attachment Name Ends With" these extensions directly to Deleted Items:
scr pif bat vbs exe Note you don't put ".scr" but just "scr", etc. No dots. Some days half the mail I get on that account falls into that category. It's great to not even have to look at them, and it's easier to filter based on the extensions than on the subjects (which tend to be innocuous phrases like "How are you?" or "A funny story" or a file randomly plucked from the victim's hard drive). Now, if I only knew how to prevent that address from being forged in the "from" field by those viruses. � � � � � � � � � � � � � � � Helen Glazer, Webmaster George Glazer Gallery Antique Globes, Maps & Prints http://www.georgeglazer.com [EMAIL PROTECTED] � � � � � � � � � � � � � � � On 10/4/02 2:07 PM, "Allen Watson" <[EMAIL PROTECTED]> wrote: > I have nearly the identical setup you describe; the only difference is that > I have broken the �junk mail� rule into several rules of a similar kind > (�Junk Subjects�, �Junk phrases�, �Junk domains�). Here are some of my > suggestions: > > Junk Subjects (contained in subject field): > � � (That is, four sequential blanks. Nearly no legit mail has that; many > spammers put a series of blanks with a code number at the end.) > �mortgage� > > Junk Phrases (contained in message body): > �discount prices� > �work from home� > �hardcore� > �xxx� > various obscenities such as �f--k� > �over 18� > �earn money� > �free!� > �stock tip� > �future mailings� > �financial freedom� > �$$� > �one-time mailing� > �joke-a-day� > > > Junk domains: > Joke.com > free4all.com > > I have been amazed at how much of the spam this filters out! -- To unsubscribe: <mailto:[EMAIL PROTECTED]> archives: <http://www.mail-archive.com/entourage-talk%40lists.letterrip.com/> old-archive: <http://www.mail-archive.com/entourage-talk%40lists.boingo.com/>
