RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Nick Hayer
e.junkmail@declude.com Subject: RE: [Declude.JunkMail] Good filter? Does the source have a space or different character after the end of the string ? we could look for a space. or a > or " (?i:(http://|www).+\.(com|info|net)/[a-f0-9]{30,40}(\s|[>"])) David From: supp..

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Dave Beckstrom
@declude.com Subject: RE: [Declude.JunkMail] Good filter? Does the source have a space or different character after the end of the string ? we could look for a space. or a > or " (?i:(http://|www).+\.(com|info|net)/[a-f0-9]{30,40}(\s|[>"])) David From: supp...@declude.

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread David Barker
yer Sent: Monday, October 18, 2010 11:50 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Good filter? Hi David, I think it will FP though - Here is an example: http://eimages.ratepoint.com/7cb5f36dd6464c05d417963e3efc4386/2010-06/02b120 ed17cc24cd3567fd4396424914.gif with

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Nick Hayer
/content/secure/support_ticket.htm From: "David Barker" Sent: Monday, October 18, 2010 10:17 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Good filter? Provided the prefix to these is either www or http:// the regex wi

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread David Barker
Provided the prefix to these is either www or http:// the regex will trigger on these From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dave Beckstrom Sent: Monday, October 18, 2010 10:02 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Good filter

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Dave Beckstrom
Subject: re: [Declude.JunkMail] Good filter? Post a few of his/her base domains - just to be sure we will be taking about the same guy.. Thanks -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Dave Beckstrom
ay be some legitimate domains registered through domainsite.com but I've not seen any. _ From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Monday, October 18, 2010 8:53 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] Good filter? Po

re: [Declude.JunkMail] Good filter?

2010-10-18 Thread Nick Hayer
: https://www.skywaves.com/content/secure/support_ticket.htm From: "Dave Beckstrom" Sent: Monday, October 18, 2010 9:38 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Good filter? There is pervasive spammer who's uri

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread David Barker
, October 18, 2010 9:29 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Good filter? There is pervasive spammer who's uri pattern for the linked spam site is pretty consistent. They all have a "/" followed by some kind of home-grown obfuscation which his se

[Declude.JunkMail] Good filter?

2010-10-18 Thread Dave Beckstrom
There is pervasive spammer who's uri pattern for the linked spam site is pretty consistent. They all have a "/" followed by some kind of home-grown obfuscation which his server recognizes: http://cja244.larickcoppas.com/