Hi,

Ok, so...

There is no test that meets my initial criteria?  Are these 2 tests as
close as I can get to my critieria?

Thanks,
Andy Baldwin

[EMAIL PROTECTED]
http://www.thumpernet.com 
315-282-0020

Thursday, December 27, 2001, 10:37:43 AM, you wrote:


>>I need to know how to test email very conservatively at first, with
>>little or no risk of catching any legitimate email.  Stopping some of
>>the spam in the begginning is better than stopping none of it, or
>>stopping legitimate emails.
>>
>>Badheaders and mailfrom...do they both meet that criteria?

RSP> Yes and no.  Both can catch some "quasi-legitimate" mail -- mail that 
RSP> *should* be legitimate, but has something wrong with it.  It's kind of like 
RSP> letters that slip through in regular mail without as much postage as they 
RSP> should, or businesses that send out mail using envelopes with their old 
RSP> address on it:  In either case, the mail might be bumped out of the 
RSP> standard mail routing.

RSP> The BADHEADERS test only will catch mail with malformed headers, so it 
RSP> won't catch any legitimate mail, unless it was sent from a broken mail 
RSP> client (in which case it is likely the mail would get deleted somewhere 
RSP> along the line, or otherwise wouldn't make it to the intended recipient).

RSP> The MAILFROM test checks the return address of the E-mail, and makes sure 
RSP> that it is a valid domain.  This can only catch legitimate E-mail if it 
RSP> comes from a mail client that wasn't set up properly (IE someone puts 
RSP> "[EMAIL PROTECTED]" as their address, and "[EMAIL PROTECTED]" as their 
RSP> return address).  Again, in this case, their mail may get lost whether or 
RSP> not you use the MAILFROM test.

>>I'd like to use the hold action first, but I need to know how to look at
>>the messages to tell if it is really spam and OK to delete.

RSP> The easiest way is probably with Windows Explorer, which you can use to 
RSP> look at the \IMail\spool\spam directory, and then double-click the D*.SMD 
RSP> files to view the E-mails.  If you want to deliver one, you need to copy 
RSP> both the D*.SMD and Q*.SMD files back to the \IMail\spool directory (IMail 
RSP> has one "D" file and one "Q" file for each E-mail).
RSP>                                 -Scott

RSP> ---
RSP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

RSP> ---

RSP> This E-mail came from the Declude.JunkMail mailing list.  To
RSP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
RSP> type "unsubscribe Declude.JunkMail".  You can E-mail
RSP> [EMAIL PROTECTED] for assistance.  You can visit our web
RSP> site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to