: Tuesday, December 09, 2003 12:47 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] no Subject or Contents
I have seen 2 messages now that have nothing in the subject and
nothing in
the body. Is there a way to block these?
You should be able to use a line such as SUBJECT 3 ISBLANK
I tried to look at the source for the body and it would not let me. Plus
when I open the message it says Untitled - Message (Plain Text).
So that would mean it is blank, right?
Perhaps -- it would depend on your mail client. However, if it doesn't let
you view the source, I would be suspicious
Some one's e-mail client keeps changing/fixing/correcting/whatever the
subject line and making it longer and longer.
Please fix it.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail
easy to code.
Just a thought.
_M
|-Original Message-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
|Sent: Monday, December 01, 2003 5:54 PM
|To: [EMAIL PROTECTED]
|Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
|[Bill] [stranger] [things] [have
Ha ha ha! plop... (laughs his head off)
|-Original Message-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
|Sent: Monday, December 01, 2003 6:22 PM
|To: [EMAIL PROTECTED]
|Subject: Re: [Declude.JunkMail] Subject Starts with
|
|
|Oh, yes, now it get
is
run?/newbie
Andrew ;)
-Original Message-
From: Pete McNeil [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 02, 2003 6:50 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Subject Starts with
I recommend a simple scheme of simple characters and escape sequences.
Borrowing
, December 02, 2003 12:12 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [Declude.JunkMail] Subject Starts with
newbieOooh! Scott, how about you *just* implement in the next interim
full
regexp text processing like product X along with MIME decoding like
product
Y, MIME error handling like product Z
Scott, feature request. (Sigh, another one.)
Can you add something like this:
SUBJECT 0 STARTSWITHSPACE
I am seeing a good amount of spam where the subject line starts with a space
and then some character and then the subject.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
Scott, feature request. (Sigh, another one.)
Can you add something like this:
SUBJECT 0 STARTSWITHSPACE
I am seeing a good amount of spam where the subject line starts with a space
and then some character and then the subject.
Ah, good idea -- I'll see if we can add
Scott,
Instead of adding it a command, how about you just create a substitution
string for space, i.e. [space]. This way it could be used in this
fashion, as well as before some words (as a delimiter in the sense that
Bill earlier suggested).
SUBJECT 0 BEGINSWITH [space]
BODY
This way, if it starts a trend, we can not filter on [space] anymore..
Yes, but right now we can't filter on a space :) Scott might also get a
little fancy and convert the special character combinations from MIME
like =3D to ASCII equivalents before processing the filters. He's
already
: Monday, December 01, 2003 1:27 PM
Subject: RE: [Declude.JunkMail] Subject Starts with
I have to agree with Kami. I would rather not define reserved words.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED
That's just it, I am seeing the use of [] in spam subject lines.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Monday, December 01, 2003 2:32 PM
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Monday, December 01, 2003 5:32 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Subject Starts with
It's not really a reserved word since the suggestion was space enclosed in
square brackets - how often have you seen
So how would that hurt anything if all it provides is a way to delimit a
test and tell Declude that this [space] is a space?
Bill
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 2:54 PM
Subject: RE
Oh, yes, now it get it... [eye rolling out of head onto floor] ;-)
Bill
- Original Message -
From: Kami Razvan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 2:53 PM
Subject: RE: [Declude.JunkMail] Subject Starts with
[Bill] [stranger] [things] [have
to trigger a match. This is the same type of delimiter
capability being requested for Declude.
Hope this helps to clarify...
Bill
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 2:54 PM
Subject: RE: [Declude.JunkMail
Ditto for me, not a single message ever caught by this test.
Bill
- Original Message -
From: Kami Razvan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, November 27, 2003 1:14 PM
Subject: RE: [Declude.JunkMail] Subject and body is B
Hi;
I suggested body blank but frankly
Everyone pats John on his back and assure him they have all gone through
similar experiences :)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Friday, November 28, 2003 7:34 PM
To: [EMAIL PROTECTED]
Subject: RE
Everyone pats John on his back and assure him they have all gone through
similar experiences :)
Oh, I feel so much better now, thanks.
Actually, I found another one this morning. Turns out though it is a badly
broken header to where the body (html) ends up seen in the header.
John Tolmachoff
Any body else seeing messages where the subject is only b or bbb and the
body is only b or bbb?
Could this be a spammer checking for valid addresses?
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com
way to check for valid addresses..
Has anyone else seen this?
Regards,
Kami
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Thursday, November 27, 2003 12:56 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Subject
] On Behalf Of John Tolmachoff (Lists)
Sent: Thursday, November 27, 2003 9:56 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Subject and body is B
Any body else seeing messages where the subject is only b or bbb and the
body is only b or bbb?
Could this be a spammer checking for valid
: Thursday, November 27, 2003 9:56 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Subject and body is B
Any body else seeing messages where the subject is only b or bbb and the
body is only b or bbb?
Could this be a spammer checking for valid addresses?
John Tolmachoff
Engineer/Consultant
On a related note, I see rushes where the spam has no body and the same
header appears from multiple open relays all at the same time; I think
it's
broken spamware.
You mean like this: (That is the entire D file.)
---
)
-Original Message-
From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 27, 2003 11:14 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Subject and body is B
On a related note, I see rushes where the spam has no body and the same
header appears from
PROTECTED]'
Subject: RE: [Declude.JunkMail] Subject and body is B
Hmm, nope, but I have also seen broken headers like you provided, but
never
with so much misplaced stuff in the header; from what Scott has previously
mentioned, I would guess that the way your sample message is broken
: Thursday, November 27, 2003 3:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Subject and body is B
Yes, the BODY ISBLANK has done well for me.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail
Scott, I am ROFLOL at this:
11/17/2003 12:12:20 Q2ba00068020856ba Triggered ISBLANK filter BASICFILTER
on THIS_STRING_SHOULD_NEVER_BE_IN_AN_EMAIL_OR_IT_WILL_BE_MARKED_AS_SPAM
[weight-5].
Some times, you are just too funny.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
---
[This
Scott, I am ROFLOL at this:
11/17/2003 12:12:20 Q2ba00068020856ba Triggered ISBLANK filter BASICFILTER
on THIS_STRING_SHOULD_NEVER_BE_IN_AN_EMAIL_OR_IT_WILL_BE_MARKED_AS_SPAM
[weight-5].
Some times, you are just too funny.
:)
Actually, that was designed for internal use, and wasn't meant to
Hi;
Regarding the
special characters in the subject line.
Would it not be
easier if Declude could do filtering after it removes all special characters
first.
I see a couple of
common behavior that could easily be done with a REMOVE call in the text for
subject.
1: Multiple
spaces
What about the use of replacement characters like
V!@gr@, which I see a lot of? With your test,
viagra becomes "Vgr".
Bill
- Original Message -
From:
Kami
Razvan
To: [EMAIL PROTECTED]
Sent: Friday, November 07, 2003 3:01
AM
Subject: [Declud
proven to be quite effective. Scott could
also similarly create a test that would detect a number of instances of
stripping out punctuation surrounded by A-Z within the body (or
subject) like he does with the COMMENTS test (I don't think you should
bother with the numbers because of FP's).
Matt
** the 2nd attempt.. the first one I sent earlier never
got posted.
---
I know exactly
what you are talking about..
But.. this is not
a solution for all .. all I am suggesting is instead of us adding all the
characters .. this
Where
can I find Junkmail's readme file? I need to block email with the usual bad
words
in the
subject and body, but can't find documentation on how to do
this.
TIA
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Kami
RazvanSent: Friday
Where can I find Junkmail's readme file?
The release notes are at http://www.declude.com/relnotes.htm .
The manual is at http://www.declude.com/junkmail/manual.htm .
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
I'll muddle my way through humbly.
---Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Sanford Whiteman
Sent: Thursday, November 06, 2003 6:34 PM
To: Mike Gable
Subject: Re[2]: [Declude.JunkMail] Non-alpha-numeric subject filter
Sandy, I think you're missing
Thanks. Are any of these links accessible through the site?
I couldn't find them.
Jose
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Friday, November 07, 2003 12:40 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Removing
Hi. I've composed a
simple but effective subject filter for non-alpha-num characters that are
intended to obfuscate words and phrases. It is catching a lot more junk than
before. My hold weight is 25 and delete is 35. Forgive me if this is an old
idea. Here it is:
SUBJECT 6 CONTAINS
It is catching a lot more junk than before.
Checked your FPs lately?
SUBJECT 2 CONTAINS -
I get countless legit e-mails with hyphens in the Subject.
SUBJECT 2 CONTAINS [
SUBJECT 2 CONTAINS ]
Mailing list e-mails very often use brackets in the Subject, so you're
giving more weight
Title: Message
Scott,
A good add-on test might be a count of punctuation characters in the
subject. That would be very close to this suggestion but might be easier to use
and require less processing.
In particular the drug "member augmentation" folks are on a tear
lately o
)
Subject: [Declude.JunkMail]
Non-alpha-numeric subject filter
Hi. I've composed a simple but effective subject filter for
non-alpha-num characters that are intended to obfuscate words and phrases. It
is catching a lot more junk than before. My hold weight is 25 and delete is 35.
Forgive me
Gable
Subject: Re: [Declude.JunkMail] Non-alpha-numeric subject filter
It is catching a lot more junk than before.
Checked your FPs lately?
SUBJECT 2 CONTAINS -
I get countless legit e-mails with hyphens in the Subject.
SUBJECT 2 CONTAINS [
SUBJECT 2 CONTAINS ]
Mailing list e-mails
]
Subject: RE: [Declude.JunkMail]
Non-alpha-numeric subject filter
Scott,
A good add-on
test might be a count of punctuation characters in the subject. That would be
very close to this suggestion but might be easier to use and require less
processing.
In particular the
drug member
Sandy, I think you're missing the point.
My weighting system has enough slop in it to allow for some points to be
given to legitimate senders. Even the Declude JunkMail list now gets 4
points for having [ and ] in the subject, but it still comes through fine.
If we try to prevent all false
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Sanford
Whiteman
Sent: Thursday, November 06, 2003 5:16 PM
To: Mike Gable
Subject: Re: [Declude.JunkMail] Non-alpha-numeric subject filter
It is catching a lot more junk than before.
Checked your
characters. On a subject search, that should be doable. Any
volunteers for finding the 15 most popular letters? I'll be happy to
code it up with a little help.
BTW, spammers using the first type of word obfuscation are also quite
likely to use other types, and fail tests like GIBBERISH, GIBBERISHSUB
Sandy, I think you're missing the point.
I don't think so.
A Subject with a pair of [square brackets] in it is alone, practically
speaking, a 0% indicator of spam, unless your mail traffic is
separately insured against such incidents (which I doubt it is). As
such, it should
Is it normal for the SUBJECT action to be taken for every recipient in a
message, even if only one recipient has that action defined in the .junkmail
file?
The manual states that this happens for the ATTACH action, but doesn't
mention it for the SUBJECT action.
Thanks,
Scot
---
[This E-mail
Greetings all
I have some users who are starting to get spam with nothing in the subject
and nothing in the body, save a single link to a picture on the internet. Is
there a test for nothing in subject? I already have the subjectchars test
setup, but that only tests for subjects over a certian
If you have JunkMail Pro, you can create a filter text file with a line
like:
SUBJECT 0 ISBLANK
The weight, of course, is up to you.
Andrew 8)
-Original Message-
From: James James [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003 2:04 PM
To: [EMAIL PROTECTED]
Subject
.
Andrew 8)
-Original Message-
From: James James [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 16, 2003 3:01 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test for nothing in the subject line?
Thanks Andrew. I do have JunkMail Pro and I just set this up, but I hate
asking a list
To continue the discussion on encoded subject lines, the ones I see as spam
always have a short body and is always HTML like the following: (Without the
extra spaces I through in there.
html body
cen te r !--pfuhja2jjk-- a href=http : //www . currency4.com
/host/d efault.asp?I D=omni img
I'm not familiar with this test?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
Sent: Wednesday, September 10, 2003 10:27 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Strange Subject
Add the following tests and it get's even
, a.k.a. SUBJECTSPACES, just simply counts the number of
spaces in a subject line. Spammers often will do something like show a
subject, then a bunch of spaces, and then some gibberish. It will also
score on some very long subjects which are not common in real E-mail.
The scoring is additive as higher
SUBJECT 40 CONTAINS =?ISO-8859-1?b?
I'm seeing quite a few of these coming in, but they are getting held.
I'm including a sample from my log, which is set to HIGH so that others can
see what tests have been useful for me.
An interesting point that came out of my following this thread is that I
Looking at my spamples I don't see any prefix letter:
Subject: =?iso-8859-1?b?QnVzeSBhdCB3b3Jr?=?
Subject: =?iso-8859-1?B?RGlzY3JlZXQgT24gTGluZSBQaGFybWFjeSwgVmlhZ3Jh?=
Subject: =?ISO-8859-1?b?RndkOiBUaA==?=e 24th o=?ISO-8859-1?b?ZiB0aGk=?=s month
Subject: =?iso-8859-1?b
Here you go.
Out of the 85 messages received in less than 3 days with this ISO encoded
subject, 11 had the encoding in the middle of the line (see attachment).
I think they were all caught due to the weights of other tests.
Andrew 8)
-Original Message-
From: Dan Patnode [mailto:[EMAIL
I've been capturing this stuff and I have found the code in the middle
of native language text, but only occasionally. Some examples:
Subject: You never IM =?ISO-8859-1?B?bWUgYW55?=more
Subject: This
is=?ISO-8859-1?b?IHRoZSA1dGgg?=email=?ISO-8859-1?b?IEkgc2Vu?=t you
Subject: =?ISO-8859-1?b
the test from running. Same goes for
other languages.
I just got my first false positive out of 200 catches. This was from
Korea but written in English (still encoded though). There are two
clues in the headers as to how to defeat the test:
Subject: [22] =?euc-kr?B
Either test grouping, or some way to limit the score of a filter that
increments, or someway to negate the whole filter with a test inside of
the filter. Something like:
SUBJECTEXEMPTCONTAINS?b?
That would keep your negation techniques from having an effect outside
of the test
FYI, I pulled this test 3 weeks ago after a email from France came through (or rather
didn't) with this subject:
Subject: =?ISO-8859-1?B?RW5qb3kgc3VtbWVyIHVudGlsIGl0cyB2ZXJ5IGVuZCE=?=
There's definitely is a correlation here among spammers, ?B? encoded subjects,
disposable domain names
PROTECTED] wrote:
FYI, I pulled this test 3 weeks ago after a email from France
came through (or rather didn't) with this subject:
Subject:
=?ISO-8859-1?B?RW5qb3kgc3VtbWVyIHVudGlsIGl0cyB2ZXJ5IGVuZCE=?=
There's definitely is a correlation here among spammers, ?B?
encoded subjects, disposable domain
subject filter is tagging over 5% by itself, and with
perfect accuracy so far. A functional gibberish body filter though
would have a reasonable number of false positives (was tagging buy.com
links that were shown in displayable text for instance). I don't of
course though expect Scott to rush
Title: Message
Anyone else getting messages such as this? I'm
getting them delivered into a number or different e-mail accounts. Could
this be the next thing thanks to SoBig?
-Original Message-From: Aron
[mailto:[EMAIL PROTECTED] Sent: Thursday, September 11, 2003
8:45 AMSubject:
there is, the
higher the score). I could catch so much crap with those 40 or so two
character gibberish strings, in fact I think it was properly tagging
around 10% to 20% of all unique incoming messages today if not more.
That gibberish subject filter is tagging over 5% by itself, and with
perfect
Title: Message
This is just a virus hoax:
http://www.trendmicro.com/vinfo/hoaxes/hoax5.asp?HName=Got+You+Worm+Hoax
Cheers
Adrian
From:
Jeff Maze - Hostmaster
To: [EMAIL PROTECTED]
Sent: Thursday, September 11, 2003 11:03
AM
Subject: [Declude.JunkMail] [OT] -
Subject
Title: Message
http://securityresponse.symantec.com/avcenter/venc/data/got.you.hoax.html
Its a Hoax.
Todd Hunter
Progressive Systems
- Original Message -
From:
Jeff Maze - Hostmaster
To: [EMAIL PROTECTED]
Sent: Wednesday, September 10, 2003 8:03
PM
Subject
It pains me to suggest making your todo list longer but how about adding
test grouping?
Don't feel bad -- it was already in the todo list. :)
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus:
Doug McKee wrote:
What is your test setup for the above string, please?
SUBJECT 15 CONTAINS =?ISO-8859-1?b?
>From what I can tell, there's no valid reason to encode Latin-1 in the
subject since that character set is supported by default in E-mail, so
it's quite safe to fail on j
I did a scan of all uncaught spam from the last week, found all the one's with Q,
removed the QU's and ended up with this list. All of these would have been seen by
Matt's new config:
Subject: Block those unwanted Popups yqvqk
Subject: drive luxury cars and get paid 9xP%oY5NzPG\q2G
, found all the one's with Q, removed the QU's and ended up with this list. All of these would have been seen by Matt's new config:
Subject: Block those unwanted Popups yqvqk
Subject: drive luxury cars and get paid 9xP%oY5NzPG\q2G
Subject: drive luxury cars and get paid L0z[7J4aYq
Matthew Bramble wrote:
Use a text filter and add something like:
SUBJECT 40 CONTAINS =?ISO-8859-1?b?
to it.
I tried this all the way down to ust ?b? and a SUBJECT filter didn't
catch it. The SUBJECT filter also doesn't catch the decoded text.
I sent one to myself before I posted, just
Add www.spamchk.com
Base64 encoded subject lines will be decoded before the keyword-check.
Markus
It's on my list of things to do. That would be the best of both worlds
since this stuff always seems keyword rich.
Right now I'm writing custom filters, and loving the results...
Thanks
Mike,
I'm using v1.75i4 right now, is it possible that you are using a version
older than 1.75?
I tested my setup about 10 times before I gave up on the SUBJECT filter
and moved to using HEADERS?
BTW, regardless of how you do it or how it works, this is a great
filter. It's not that common
tested my setup about 10 times before I gave up on the SUBJECT
filter and moved to using HEADERS?
BTW, regardless of how you do it or how it works, this is a great
filter. It's not that common, but guaranteed to be spam (IMO) and
1/10th of the hits are things that would have otherwise gotten
Mike Leonard wrote:
We got about 10 of these for V-pill over the weekend, that's why I set
it up. I haven't seen any legitimate email get caught by this filter,
but we don't normally get email from any non-English speaking
countries (unless it's spam).
Mike
I've been meaning to share this
at the end of the line (such as SUBJECT
40 CONTAINS =?ISO-8859-1?b?instead of SUBJECT 40 CONTAINS
=?ISO-8859-1?b?).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses
How does a subject that shows this.
=?ISO-8859-1?b?UmU6Q2hlYXBlc3QgVmlhZ3JhIEd1YXJhbnRlZWQ=?=
Display this.
Re:Cheapest Viagra Guaranteed
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list
How does a subject that shows this.
=?ISO-8859-1?b?UmU6Q2hlYXBlc3QgVmlhZ3JhIEd1YXJhbnRlZWQ=?=
Display this.
Re:Cheapest Viagra Guaranteed
That's because the subject is encoded. To help support non-English
languages, there was an RFC that allowed subjects and message bodies to be
encoded
How does a subject that shows this.
=?ISO-8859-1?b?UmU6Q2hlYXBlc3QgVmlhZ3JhIEd1YXJhbnRlZWQ=?=
The ?b? indicates that this subject line is Base64 encoded.
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from
Any suggestion on how to block these.
Thanks.
- Original Message -
From: Markus Gufler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, September 08, 2003 4:55 PM
Subject: RE: [Declude.JunkMail] Strange Subject
How does a subject that shows this.
=?ISO-8859-1?b
SUBJECT 40 CONTAINS =?ISO-8859-1?b?
Assuming you don't ever get emails from European countries, Canada or other
locations that use accented characters.
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Phone: +1 201 934
I believe the Outlook XP and 2003 mail config test uses the subject
encoding as well on the test message. Had acustomer with bad pop
settings leave several test on webmail and they looked like that.
Thanks,
Chuck Frolick
ArgoNet, Inc.
-Original Message-
From: [EMAIL PROTECTED]
[mailto
Use
a text filter and add something like:
SUBJECT 40 CONTAINS =?ISO-8859-1?b?
to it.
I tried this all the way down to ust ?b? and a SUBJECT filter didn't
catch it. The SUBJECT filter also doesn't catch the decoded text.
I found though that if you use the HEADERS filter
Hello,
I was wondering if there was a subject contains type of test.
E.g. A message subject line contains Viagra, kinky, xxx, sex, etc. it will
fail the tests.
Is there something like this already? Thanks..
---
[This E-mail was scanned for viruses by Declude Virus (http
Jeff,
Tuesday, July 1, 2003 you wrote:
JMH I was wondering if there was a subject contains type of test.
JMH E.g. A message subject line contains Viagra, kinky, xxx, sex, etc. it will
JMH fail the tests.
JMH Is there something like this already? Thanks..
That is filtering
Ahh, ok.. Thanks..
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Smart Business
Lists
Sent: Tuesday, July 01, 2003 8:29 AM
To: Jeff Maze - Hostmaster
Subject: Re: [Declude.JunkMail] Subject Contains test
Jeff,
Tuesday, July 1, 2003 you wrote:
JMH I
). But the list messages all arrive with the
list name in the subject line similar to [Declude.JunkMail]. I'd
like to bypass JunkMail tests on these messages, is there a method I
haven't figured out yet to bypass based on a match in the SUBJECT?
Or is there a better method?
The latest beta version
I didn't think of that solution, thanks. Though I may have an issue from
one of the mailing lists, since we HOLD from that domain, but it may
work on other issues I have.
Jeff
Also, if you have the PRO version, you can set up a filter file and
then filter on SUBJECT -50 CONTAINS
). But the list messages all arrive with the list name in the
subject line similar to [Declude.JunkMail]. I'd like to bypass JunkMail
tests on these messages, is there a method I haven't figured out yet to
bypass based on a match in the SUBJECT? Or is there a better
method?
Thanks,
Jeff
---
[This E
). But the list messages all arrive with the list name in the
subject line similar to [Declude.JunkMail]. I'd like to bypass JunkMail
tests on these messages, is there a method I haven't figured out yet to
bypass based on a match in the SUBJECT? Or is there a better
method?
The latest beta version will let you
Hello, All,
Can someone tell me what it means, in the context of this discussion list,
when someone puts DSN in the subject?
Thanks,
Dan Geiser [EMAIL PROTECTED]
This E-mail is scanned and free from viruses
Hi, Scott,
Can someone tell me what it means, in the context of this discussion
list,
when someone puts DSN in the subject?
That normally means that the E-mail failed the DSN test (which is run by
http://www.rfc-ignorant.org ). It usually means that the mailserver that
sent the E-mail
Can someone tell me what it means, in the context of this discussion
list,
when someone puts DSN in the subject?
That normally means that the E-mail failed the DSN test (which is run by
http://www.rfc-ignorant.org ). It usually means that the mailserver that
sent the E-mail is running
of not content based tests that fail this message. This
should be enough to block it.
Our free tool SPAMCHK makes a lot of content based tests. I do not
reccomend to filter this spam by the subject line he hit me. Doing
this ater some months you will have a long filter list containing
numerous
Hi Dan,
Yes, as I know the pro version is able to filter keywords in the
subject-line.
We've added a lot of keywords and phrases to our subjectline filter in
SPAMCHK, but I think filtering for single special characters or also for
a certain number of special characters will create more fp's
Those are actually encrypted subject lines.
Example: When you send an Outlook Test mail, the subject line is Microsoft
Outlook Test Message.
However, when Declude sees it, it looks like
=?utf-8?B?TWljcm9zb2Z0IE91dGxvb2sgVGVzdCBNZXNzYWdl?=
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
Here is an example subject:
(±¤°í)¹éÀü¹é½ÂÁÖ°¡Â÷Æ®½ÇÀüÀÓ»óÁý¹«·á
Dan
Markus Gufler wrote:
Hi Dan,
Yes, as I know the pro version is able to filter keywords in the
subject-line.
We've added a lot of keywords and phrases to our subjectline filter in
SPAMCHK, but I think filtering
PROTECTED] On Behalf Of Dan Star
Sent: Monday, March 10, 2003 8:58 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Removing mails by the subject
Here is an example subject:
(±¤°í)¹éÀü¹é½ÂÁÖ°¡Â÷Æ®½ÇÀüÀÓ»óÁý¹«·á
Dan
Markus Gufler wrote:
Hi Dan,
Yes, as I know the pro
201 - 300 of 335 matches
Mail list logo
