Re: [Declude.JunkMail] Wildcard filter
What about this? MAILFROM END NOTENDSWITH @domain.com MAILFROM 10 STARTSWITH BOB I'd probably be looking to see if the Sender Remote IP number were blocked together. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:05AM Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
Thanks Scott, I think that may work. Since I have not used these filters before, I just want to clarify that I am reading it correctly. All mail not sent from domain.com will be skipped because of the END NOTENDSWITH filter and if it does match, the second filter will be evaluated and the weight of 10 being added for a positive match, correct? Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:19 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wildcard filter What about this? MAILFROM END NOTENDSWITH @domain.com MAILFROM 10 STARTSWITH BOB I'd probably be looking to see if the Sender Remote IP number were blocked together. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:05AM Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
You are reading it correctly. The NOTENDSWITH was added somewhere in version 1.78. Now if good mail also starts with [EMAIL PROTECTED], you'll be catching that too. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:37AM Thanks Scott, I think that may work. Since I have not used these filters before, I just want to clarify that I am reading it correctly. All mail not sent from domain.com will be skipped because of the END NOTENDSWITH filter and if it does match, the second filter will be evaluated and the weight of 10 being added for a positive match, correct? Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:19 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wildcard filter What about this? MAILFROM END NOTENDSWITH @domain.com MAILFROM 10 STARTSWITH BOB I'd probably be looking to see if the Sender Remote IP number were blocked together. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:05AM Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
Great! Thanks again. Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:48 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Wildcard filter You are reading it correctly. The NOTENDSWITH was added somewhere in version 1.78. Now if good mail also starts with [EMAIL PROTECTED], you'll be catching that too. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:37AM Thanks Scott, I think that may work. Since I have not used these filters before, I just want to clarify that I am reading it correctly. All mail not sent from domain.com will be skipped because of the END NOTENDSWITH filter and if it does match, the second filter will be evaluated and the weight of 10 being added for a positive match, correct? Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, August 23, 2004 11:19 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Wildcard filter What about this? MAILFROM END NOTENDSWITH @domain.com MAILFROM 10 STARTSWITH BOB I'd probably be looking to see if the Sender Remote IP number were blocked together. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 08/23/04 10:05AM Is it possible to use a wildcard format for a filter? The reason that I ask, is that I am getting a lot of junkmail which all have similar From senders, but the maildomain is different. So the sender will be some variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. So, I want to create a filter that would be something like [EMAIL PROTECTED] Is this possible? If not, any suggestions as to how to stop this type of spam? Thanks, __ Dean Lawrence, CIO/Partner Internet Data Technology 888.GET.IDT1 ext. 701 * fax: 888.438.4381 http://www.idatatech.com/ Corporate Internet Development and Marketing Specialists --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Wildcard filter
On Monday, August 23, 2004, 11:05:11 AM, Dean wrote: DL Is it possible to use a wildcard format for a filter? The reason that I ask, DL is that I am getting a lot of junkmail which all have similar From DL senders, but the maildomain is different. So the sender will be some DL variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. DL So, I want to create a filter that would be something like [EMAIL PROTECTED] DL Is this possible? If not, any suggestions as to how to stop this type of DL spam? If you use Message Sniffer then you can request a local black rule like this. However, I warn that this kind of rule might be very broad and could lead to false positives if it is not crafted very carefully. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Wildcard filter
Hi Pete, Thanks for the suggestion. I am running Message Sniffer, so I may concider going that route as well. Dean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Monday, August 23, 2004 2:07 PM To: Dean Lawrence Subject: Re: [Declude.JunkMail] Wildcard filter On Monday, August 23, 2004, 11:05:11 AM, Dean wrote: DL Is it possible to use a wildcard format for a filter? The reason that I ask, DL is that I am getting a lot of junkmail which all have similar From DL senders, but the maildomain is different. So the sender will be some DL variation of the same name like, [EMAIL PROTECTED], [EMAIL PROTECTED], etc.. DL So, I want to create a filter that would be something like [EMAIL PROTECTED] DL Is this possible? If not, any suggestions as to how to stop this type of DL spam? If you use Message Sniffer then you can request a local black rule like this. However, I warn that this kind of rule might be very broad and could lead to false positives if it is not crafted very carefully. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
