Do you have WHITELISTTO postmaster?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Greg Foulks
Sent: Thursday, June 27, 2002 12:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] I was spammed by myself


What is the HELOBOGUS test? I've not seen that one. You say that the spam
headers would detect... why didn't it? In fact it did not
fail one test.

greg

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Thursday, June 27, 2002 1:13 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] I was spammed by myself



>I get this email that say that it was sent from myself to myself. However
>I see some other interesting things in the header. What
>can I use in this header to keep this from happening again?
>
>Received: from $domain [80.16.228.101] by mail.nfti.com
>   (SMTPD32-6.06) id AB048501B4; Thu, 27 Jun 2002 12:19:16 -0400

Here's the first key that it is spam:  $domain.  The HELOBOGUS and
SPAMHEADERS tests will detect that; a custom filter could be used too with
the latest beta.

What else do you see in the headers that is interesting?

There is a good chance that we will add a test that will look for the same
To/From addresses, which is becoming more and more popular (even though it
is common to see in legitimate mail, too).
                               -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to