For all those "answering back" Quill was just an example. I check into a sender before bl'ing them and attempt list removal if they have it.
----- Original Message ----- From: "Matthew Bramble" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 22, 2003 9:52 AM Subject: Re: [Declude.JunkMail] Stupid question > Just another follow-up. This might be dangerous to blacklist anything > from quill.com since they are an ecommerce site and you may very well be > blocking receipts and other order related information. It would then be > safer to go after the MAILFROM, though this won't work if they change > the third-party bulk mailer. > > MAILFROM 15 CONTAINS quill.rsc01.com > > I generally unsubscribe customers from such lists when they report it as > spam since they seem legit and they are probably only being sent E-mail > because they have done business with the site. > > Matt > > > Doug Anderson wrote: > > > I'm setting up a Sender "Black list" Given the following header, what > > would I put in my black list file? > > Is it the reply to or the from I need to look at? > > In this instance I would like to kill everything from quill.com, so > > would I just use that? > > > > Received: from om-quill.rgc3.net [66.35.244.68] by mail.ameripride.org > > with ESMTP > > (SMTPD32-8.04) id A88E1B4014A; Wed, 10 Dec 2003 09:15:26 -0600 > > Received: by om-quill.rgc3.net (PowerMTA(TM) v2.0r5) id hqss6804faso; > > Wed, 10 Dec 2003 07:14:44 -0800 (envelope-from <[EMAIL PROTECTED] > > <mailto:[EMAIL PROTECTED]>>) > > MIME-Version: 1.0 > > Content-Type: text/html; > > charset="ISO-8859-1" > > Content-Transfer-Encoding: quoted-printable > > Date: Wed, 10 Dec 2003 07:14:44 -0800 > > From: "Quill.com" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> > > Reply-To: "Quill.com" <[EMAIL PROTECTED] > > <mailto:[EMAIL PROTECTED]>> > > Subject: Quill Values Your Opinion > > X-cid: quil.954.1 > > To: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > > Message-Id: <[EMAIL PROTECTED] > > <mailto:[EMAIL PROTECTED]>> > > X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with > > spam [4000020e]. > > X-Declude-Sender: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > > [66.35.244.68] > > X-Declude-Spoolname: D388e01b4014a4491.SMD > > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com > > <http://www.declude.com>) for spam. > > X-Spam-Tests-Failed: IPNOTINMX, NOLEGITCONTENT, SPAMHEADERS [3] > > X-Note: This E-mail was sent from (timeout) ([66.35.244.68]). > > X-RCPT-TO: <[EMAIL PROTECTED] > > <mailto:[EMAIL PROTECTED]>> > > Status: U > > X-UIDL: 367773216 > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.