Hi, I'm still trying to decide how to handle this spam thing...
I need to know how to test email very conservatively at first, with little or no risk of catching any legitimate email. Stopping some of the spam in the begginning is better than stopping none of it, or stopping legitimate emails. Badheaders and mailfrom...do they both meet that criteria? I'd like to use the hold action first, but I need to know how to look at the messages to tell if it is really spam and OK to delete. I'm only delivering about 700 total email per day, so for now I can take the time to look at it. I can work my way into more testing from there... Thanks, Andy Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Friday, December 21, 2001, 1:20:09 PM, you wrote: >>Question is, what test should I be running to catch genuine spam? >> >>I want to be on the safe side to start out. I have (and I am) reading >>the manual and I am looking up the entries in the spam log. RSP> Each domain seems to have a different "spam profile", depending on how long RSP> the domain has been around, where the addresses are found, and so RSP> forth. So different domains may have different needs. The most ideal RSP> tests tend to be those that catch a lot of spam, while catching little (if RSP> any) legitimate mail. RSP> In general, we've found the best test is the BADHEADERS test, because it RSP> can catch a lot of spam, while not letting any legitimate mail through RSP> (with the exception of mail that is not RFC-compliant, which would come RSP> from a broken E-mail client -- but their mail isn't going to make it to RSP> many other servers, as well). RSP> Another good test is the MAILFROM test, which will catch spam that uses a RSP> fake domain in the return address, which also shouldn't catch any RSP> legitimate mail. RSP> A new DNS-based test that works quite well is the SPAMCOP test. To see how RSP> well this and other tests work, you can go to RSP> http://www.declude.com/spamtrap.htm . RSP> -Scott RSP> --- RSP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] RSP> --- RSP> This E-mail came from the Declude.JunkMail mailing list. To RSP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and RSP> type "unsubscribe Declude.JunkMail". You can E-mail RSP> [EMAIL PROTECTED] for assistance. You can visit our web RSP> site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
