Re: [Declude.JunkMail] Stupid question

[Matthew Bramble]

Just another follow-up.  This might be dangerous to blacklist anything 
from quill.com since they are an ecommerce site and you may very well be 
blocking receipts and other order related information.  It would then be 
safer to go after the MAILFROM, though this won't work if they change 
the third-party bulk mailer.

   MAILFROM      15      CONTAINS      quill.rsc01.com

I generally unsubscribe customers from such lists when they report it as 
spam since they seem legit and they are probably only being sent E-mail 
because they have done business with the site.

Matt

Doug Anderson wrote:

I'm setting up a Sender "Black list" Given the following header, what 
would I put in my black list file?
Is it the reply to or the from I need to look at?
In this instance I would like to kill everything from quill.com, so 
would I just use that?
 
Received: from om-quill.rgc3.net [66.35.244.68] by mail.ameripride.org 
with ESMTP
  (SMTPD32-8.04) id A88E1B4014A; Wed, 10 Dec 2003 09:15:26 -0600
Received: by om-quill.rgc3.net (PowerMTA(TM) v2.0r5) id hqss6804faso; 
Wed, 10 Dec 2003 07:14:44 -0800 (envelope-from <[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>>)
MIME-Version: 1.0
Content-Type: text/html;
 charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 10 Dec 2003 07:14:44 -0800
From: "Quill.com" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
Reply-To: "Quill.com" <[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>>
Subject: Quill Values Your Opinion
X-cid: quil.954.1
To: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>>
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with 
spam [4000020e].
X-Declude-Sender: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 
[66.35.244.68]
X-Declude-Spoolname: D388e01b4014a4491.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com 
<http://www.declude.com>) for spam.
X-Spam-Tests-Failed: IPNOTINMX, NOLEGITCONTENT, SPAMHEADERS [3]
X-Note: This E-mail was sent from (timeout) ([66.35.244.68]).
X-RCPT-TO: <[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>>
Status: U
X-UIDL: 367773216
 


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.