John,

Sorry, I deleted the email already.  I looked at the header when it
arrived and the only thing I could trap in there would be the "from" or
"received" domain.  I'm trying to not be that specific to in my filters
though.  I'd grow old trying to block specific domains.  I'm trying to
focus on patterns in spam that can be trapped and filtered. 

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> John Tolmachoff
> Sent: Thursday, March 20, 2003 1:14 AM
> To: [EMAIL PROTECTED]
> Subject: [JSpamFilter] RE: [IMail Forum] Difficult Spam
> 
> 
> Could you kindly post the full headers?
> 
> What I do is add those specific misspellings to the Declude filters.
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:IMail_Forum- 
> > [EMAIL PROTECTED] On Behalf Of Dave
> > Sent: Wednesday, March 19, 2003 10:59 PM
> > To: [EMAIL PROTECTED]
> > Subject: [IMail Forum] Difficult Spam
> > 
> > See how this person bypassed the spam filters using 
> creative spelling?
> > 
> > Have any of you found a solution to trapping these?  My 
> filters work 
> > good and use a scoring process but they don't work when the spammer 
> > obfuscates the spelling.
> > 
> > I had one spammer who wouldn't quit...I wrote a program that placed 
> > about 3000 bogus orders on his web site and the supposed 
> customers name
> > was "email spam         must stop"     Never heard from him again.
> > *grin  Can't do that will all spammers though.  I know of no way 
> > declude or any other package would stop a spam such as the 
> one below 
> > unless the filter trapped on tropicalpills and that's a lost 
> > cause...filters can't be that specific.
> > 
> > 
> > -----Original Message-----
> > From: Peter Lasader Phd6 [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, March 19, 2003 4:32 PM
> > To: gawk
> > Subject: [JSpamFilter] Order v_i a g r_a from home, no doctors! 
> > 0077QM-6
> > 
> > 
> > Here is your chance to skip the embarrassing, 
> time-consuming task of 
> > going to d.octor's appointments to try and get the 
> p.rescription you 
> > want.
> > We're ready to Fedex your online   v_i a g r_a   
> p.rescription orders
> > right now!!!
> > 
> > No p.rescription necessary!!! Just visit the link below and 
> have your 
> > v_i a g r_a on its way to you today!!! 
> > http://www.TropicalPills.com/main2.php?rx=17283
> > 
> > 
> > 6990YawG6-095ouli1162aHdh8-232fsfG7484TrFE7-901FQSg227l51
> > 
> > 
> > 
> > 
> > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> > List Archive: 
> > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> 
> 
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: 
> http://www.mail-archive.com/imail_forum%> 40list.ipswitch.com/
> 
> Knowledge Base/FAQ: 
> http://www.ipswitch.com/support/IMail/
> 
> 



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to