Roger,
I went across the hall and talked to my regular expression
guru. This is what we came up with:
H!~From:\w:nul
This says that any message that doesn't have "From:"
followed a word character in the header--blank From: header
or no From: header--should be sent to the bit bucket. Though
you probably want to change nul to SPAMBOX.
This should catch what you want.
Bob
In reply to 17 Nov message from [EMAIL PROTECTED]:
>Reply to: Robert Stull
> Re: [IMail Forum] Imail Filtering Wednesday
>7:46:24 AM
> From: Roger Heath [EMAIL PROTECTED]
>R> Refuse NULL senders checks the actual sender in the
>R> SMTP envelope--the "MAIL From:" in the log below.
>R> As we all know from fighting spam, the "From:" line
>R> in the messaage envelope can claim to be (or not R>
>be, in this case) from anybody it wants. Grabbing it
>R> there would catch mail from every user that didn't
>R> put their from address in their mail client.
>R> Bob
>I very much want Imail filters to work. The message
>that got through on mine yesterday had a blank From:
>field. There were no characters beyond the ':'
>character at all. Only the log showed an address but
>not the message header. I have no idea how this would
>be accomplished unless only the telnet login was
>giving a from address?
>The regular Imail rules filter here is very
>unreliable. I have spent the last month trying to
>filter all spam here that I see. It has been reduced
>but about 30% of the filtering simply does not work. I
>have no idea why. I gave the example earlier:
>B~FFA NET:SPAMBOX
>B~FFA Site:SPAMBOX
>B~www.ffanet.com:SPAMBOX
>B~ffa net:SPAMBOX
>This morning I had 10 messages that contained the
>above content that arrived in my personal mailbox.
>During a month of attempting to filter this existing
>source of spam, I have blocked about 10% of this
>sources messages.
>--
>bcnu
> www.rleeheath.com
>Roger Heath [EMAIL PROTECTED]
>advanced internet services and software technology
>advanced concepts in emergency medical technology
>Please visit
>http://www.ipswitch.com/support/mailing-lists.html to
>be removed from this list.
--
Robert S. Stull
Development Manager and
Code Demolitions Expert
Ipswitch, Inc.
http://www.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
