We get a fair amount of SPACE subjects from our webmail users. Imail's webmail interface gets upset if you try and send an email with both a blank subject and a blank body [for example, an unsubscribe message to an address that does all of the processing based on the To: address alone], so a spacebar in the subject field appears to be a common choice here.
I still like this idea and I implemented Rick's approach with a small weight. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson Sent: Tuesday, July 06, 2004 4:19 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPACE character most of them look like web mailers or automated systems that have the subject coded incorrectly with an extra leading space. Rick Davidson National Systems Manager North American Title Group - ----- Original Message ----- From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, July 06, 2004 3:46 PM Subject: RE: [Declude.JunkMail] SPACE character > I would be interested to know why the legit messages have a subject line > that starts with a space. > > One of the servers I maintain is for a real estate company. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Rick Davidson > > Sent: Tuesday, July 06, 2004 11:48 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] SPACE character > > > > yea it works, but I have been running a test with that today and havent > > caught a single spam message but have caught over 30 legit messages... > > > > Rick Davidson > > National Systems Manager > > North American Title Group > > - > > ----- Original Message ----- > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, July 06, 2004 1:52 PM > > Subject: RE: [Declude.JunkMail] SPACE character > > > > > > AH, interesting work around. Thanks, I will try that. > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of Rick Davidson > > > Sent: Tuesday, July 06, 2004 10:11 AM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.JunkMail] SPACE character > > > > > > I messed around with this and found you can do the following > > > > > > HEADERS 0 CONTAINS Subject: <-- with two spaces after it > > > > > > The header formating is "Subject: " with one space after it so > theoreticly > > > add a second space in your filter rule and it will do what you want. > > > > > > > > > Rick Davidson > > > National Systems Manager > > > North American Title Group > > > - > > > ----- Original Message ----- > > > From: "Scott Fisher" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Sent: Tuesday, July 06, 2004 12:11 PM > > > Subject: Re: [Declude.JunkMail] SPACE character > > > > > > > > > I see a small amount of valid e-mail that starts with a space. > > > > > > Perhaps > > > > > > SUBJECT 15 ISSPACE > > > Similiar to the ISBLANK option? > > > > > > Scott Fisher > > > Director of IT > > > Farm Progress Companies > > > > > > >>> [EMAIL PROTECTED] 07/06/04 10:59AM >>> > > > I have been seeing more spam where the subject line is a single space. > > > > > > Feature request, add something like this; > > > SUBJECT 15 STARTSWITHSPACE > > > > > > John Tolmachoff > > > Engineer/Consultant/Owner > > > eServices For You > > > > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
