Re: [Declude.JunkMail] Forwarded messages
When a e-mail is forwarded, is the e-mail again processed by Declude? IIRC, someone convinced Ipswitch to force forwarded E-mails to be rescanned for a recent 8.1x version. Prior to that, they would not be rescanned. Declude now has code in it, however, to attempt to prevent the rescanning. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Forwarded messages
When a e-mail is forwarded, is the e-mail again processed by Declude? John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Forwarded messages
What are the normal forwarded message indicators in the subject line? Fwd: Fd: John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Forwarded messages
I haven't seen Fd:, but Fw: is very common. Bill - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 24, 2003 11:09 AM Subject: [Declude.JunkMail] Forwarded messages What are the normal forwarded message indicators in the subject line? Fwd: Fd: John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. e.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Forwarded messages
The indicators in the subject line are as follows: SUBJECT0CONTAINSfwd: SUBJECT0CONTAINSfw: There's a very strong indicator of a forwarded message in the body, though some things like Web mail clients might not include it: BODY0CONTAINSoriginal message Also, when a message is attached as a result of forwarding, the following will also appear: BODY0CONTAINSmessage/rfc822 Like Bill, I don't recall seeing Fd in legit E-mail. Matt John Tolmachoff (Lists) wrote: What are the normal forwarded message indicators in the subject line? Fwd: Fd: John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Forwarded messages
Like Bill, I don't recall seeing Fd in legit E-mail. That's what I thought. I have seen a few spam with a subject line that starts with Fd:. I think I can safely filter on that with a small weight like 5. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
