>I need to know how to test email very conservatively at first, with
>little or no risk of catching any legitimate email. Stopping some of
>the spam in the begginning is better than stopping none of it, or
>stopping legitimate emails.
>
>Badheaders and mailfrom...do they both meet that criteria?
Yes and no. Both can catch some "quasi-legitimate" mail -- mail that
*should* be legitimate, but has something wrong with it. It's kind of like
letters that slip through in regular mail without as much postage as they
should, or businesses that send out mail using envelopes with their old
address on it: In either case, the mail might be bumped out of the
standard mail routing.
The BADHEADERS test only will catch mail with malformed headers, so it
won't catch any legitimate mail, unless it was sent from a broken mail
client (in which case it is likely the mail would get deleted somewhere
along the line, or otherwise wouldn't make it to the intended recipient).
The MAILFROM test checks the return address of the E-mail, and makes sure
that it is a valid domain. This can only catch legitimate E-mail if it
comes from a mail client that wasn't set up properly (IE someone puts
"[EMAIL PROTECTED]" as their address, and "[EMAIL PROTECTED]" as their
return address). Again, in this case, their mail may get lost whether or
not you use the MAILFROM test.
>I'd like to use the hold action first, but I need to know how to look at
>the messages to tell if it is really spam and OK to delete.
The easiest way is probably with Windows Explorer, which you can use to
look at the \IMail\spool\spam directory, and then double-click the D*.SMD
files to view the E-mails. If you want to deliver one, you need to copy
both the D*.SMD and Q*.SMD files back to the \IMail\spool directory (IMail
has one "D" file and one "Q" file for each E-mail).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
