Re: [SPAM:]Re: [Declude.JunkMail] SPACE character
X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90] Today my declude list started failing REVDNS. This happen to anybody else? Our IP has a reverse DNS entry, and it appears to be set up properly (all DNS servers returning the same response). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPACE character
I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPACE character
I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
Unfortunately, I see many uneducated people sending real mail without anything in the subject line. Note sure if that would translate into a blank or a null subject line. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, July 06, 2004 12:11 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
The problem with ISSPACE is the spammers will then use 2 spaces, or a space and then a character. However, with STARTSWITHSPACE, that will always catch it as either that will be an error on the senders part, which wont matter as the message will not have enough weight anyways, or be a spammer. Even if you do see legit e-mail that starts with a space (I would like to know why) when used in the weighting system, it should be no problem, unless that legit message has other problems that is causing it to fail other tests as well. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, July 06, 2004 9:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPACE character
I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPACE character
yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
I would be interested to know why the legit messages have a subject line that starts with a space. One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPACE character
I have received messages from friends with blank subject lines. I guess they're lazy. G.Z. - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 2:46 PM Subject: RE: [Declude.JunkMail] SPACE character I would be interested to know why the legit messages have a subject line that starts with a space. One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
A blank line is different from a space. Presumably, in a good email (ie: person-to-person), the space would have to have been specifically inserted in a client by clicking in the subject field and pressing the spacebar. Bad emails could originate from poorly written mass-mailers that start EVERY subject with a space, or similar. Blank lines are easy to do in almost any email client with zero effort, but a space would (normally, I'm sure there are exceptions) have to be manually input. That's my understanding of it, anyway. -Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn \\ WCNet Sent: Tuesday, July 06, 2004 3:57 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I have received messages from friends with blank subject lines. I guess they're lazy. G.Z. - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 2:46 PM Subject: RE: [Declude.JunkMail] SPACE character I would be interested to know why the legit messages have a subject line that starts with a space. One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E
Re: [Declude.JunkMail] SPACE character
most of them look like web mailers or automated systems that have the subject coded incorrectly with an extra leading space. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 3:46 PM Subject: RE: [Declude.JunkMail] SPACE character I would be interested to know why the legit messages have a subject line that starts with a space. One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
We get a fair amount of SPACE subjects from our webmail users. Imail's webmail interface gets upset if you try and send an email with both a blank subject and a blank body [for example, an unsubscribe message to an address that does all of the processing based on the To: address alone], so a spacebar in the subject field appears to be a common choice here. I still like this idea and I implemented Rick's approach with a small weight. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 4:19 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character most of them look like web mailers or automated systems that have the subject coded incorrectly with an extra leading space. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 3:46 PM Subject: RE: [Declude.JunkMail] SPACE character I would be interested to know why the legit messages have a subject line that starts with a space. One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail
RE: [Declude.JunkMail] SPACE character
I have been seeing more spam where the subject line is a single space. Really? From over 20.000 messages in the last 2 days I can see only two (legit!) messages having an initial space in the subject line. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPACE character
At the same volume level, I see thirty times more legitimate messages with a leading space in the subject message. Most are from users, with one to three leading spaces. Three different legitimate news alerts are using up to 6 leading spaces, presumably to make their subject line stand out in the recipient's mail client. For every message with a leading space that was legitimate, there was an even number that was spam. In a similar vein, there were twice as many spams (or viruses?) that had a blank subject line, all of which were annihilated by ip4r tests. I won't be creating a rule that involves a leading space in the subject. YYMV... Andrew 8) p.s. We're a real estate company (and then some) -Original Message- From: Markus Gufler [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:40 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPACE character I have been seeing more spam where the subject line is a single space. Really? From over 20.000 messages in the last 2 days I can see only two (legit!) messages having an initial space in the subject line. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [SPAM:]Re: [Declude.JunkMail] SPACE character
Declude-Spoolname: D09600158013a67d3.SMD Precedence: bulk Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90] X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90] X-Spam-Tests-Failed: IPNOTINMX, REVDNS, WEIGHT10, WEIGHT12, WEIGHT15, WEIGHT16 [16] X-Country-Chain: UNITED STATES-destination X-Declude-Date: 07/06/2004 20:19:27 [7] X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 370536987 Today my declude list started failing REVDNS. This happen to anybody else? Thanks Robert - Original Message - From: Rick Davidson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 4:19 PM Subject: [SPAM:]Re: [Declude.JunkMail] SPACE character most of them look like web mailers or automated systems that have the subject coded incorrectly with an extra leading space. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 3:46 PM Subject: RE: [Declude.JunkMail] SPACE character I would be interested to know why the legit messages have a subject line that starts with a space. One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character yea it works, but I have been running a test with that today and havent caught a single spam message but have caught over 30 legit messages... Rick Davidson National Systems Manager North American Title Group - - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 1:52 PM Subject: RE: [Declude.JunkMail] SPACE character AH, interesting work around. Thanks, I will try that. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 10:11 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character I messed around with this and found you can do the following HEADERS 0 CONTAINS Subject: -- with two spaces after it The header formating is Subject: with one space after it so theoreticly add a second space in your filter rule and it will do what you want. Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Scott Fisher [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 12:11 PM Subject: Re: [Declude.JunkMail] SPACE character I see a small amount of valid e-mail that starts with a space. Perhaps SUBJECT 15 ISSPACE Similiar to the ISBLANK option? Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/06/04 10:59AM I have been seeing more spam where the subject line is a single space. Feature request, add something like this; SUBJECT 15 STARTSWITHSPACE John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from
