Hi Scott:

Sorry to have sent the entire header but I think I did not relay the
issue clearly.  Look at the header and see who it is sent to.  We have
no business receiving an email that is addressed to:

[EMAIL PROTECTED] since this is our backup mail server.

When they send it to that address they are basically SPAM'ing a large
number of people.  We truly should never receive e-Mail when it is sent
to that anyone at that address.  So if I can see who this is addressed
to we can add weight to it.

May be (just an idea) - that a list of domains can exist that we can
allow the recipient address have.  Anything other than the listed
domains can have a weight added to it.  This way we can indicate that
recipient can have @Durability.com.  If anything other than @Durability
add 2 to its weight.  Just an idea.

On another note (Aside from this one): We are receiving SPAM from
Japanese sources with purely Japanese writings.  We don't even know what
we are seeing so we can block it or filter it.  Any ideas as to how to
combat this new trend?  This also holds true with Turkish language SPAM.
I am sure we have to learn to live with this one but just in case there
are ideas out there..

===============================================================
Received: from rainer.bnt.com [12.4.218.18] by mail.durability.com with
ESMTP
  (SMTPD32-7.11) id AB3525200EC; Tue, 30 Jul 2002 03:07:33 -0400
Received: from oscar.bnt.com (oscar.bnt.com [12.4.218.17])
        by rainer.bnt.com (8.12.3/8.12.3) with ESMTP id g6U778SO060862
        for <[EMAIL PROTECTED]>; Tue, 30 Jul 2002 03:07:08 -0400 (EDT)
        (envelope-from [EMAIL PROTECTED])
Received: from 206.112.72.3 ([202.130.255.21])
        by oscar.bnt.com (8.12.3/8.12.3) with SMTP id g6U76nI7047365
        for <[EMAIL PROTECTED]>; Tue, 30 Jul 2002 03:07:01 -0400 (EDT)
        (envelope-from [EMAIL PROTECTED])
Message-Id: <[EMAIL PROTECTED]>
X-Authentication-Warning: oscar.bnt.com: Host [202.130.255.21] claimed
to be 206.112.72.3
Received: from 36.185.61.158 ([36.185.61.158]) by f64.law4.hotmail.com
with QMQP; Jul, 30 2002 4:05:03 AM -0100
Received: from [198.250.227.71] by m10.grp.snv.yahoo.com with QMQP; Jul,
30 2002 2:57:01 AM -0000
Received: from unknown (HELO mail.gmx.net) (78.165.116.169) by
smtp4.cyberec.com with smtp; Jul, 30 2002 1:59:44 AM +0400
Received: from rly-xw01.mx.aol.com ([153.196.56.114]) by
da001d2020.lax-ca.osd.concentric.net with SMTP; Jul, 30 2002 12:51:47 AM
-0700
From: Carl Miller <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: 
Subject: Win Slot Jackpots                                         aipll
Sender: Carl Miller <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Date: Tue, 30 Jul 2002 04:08:14 -0700
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner
consistent with spam [6000410f].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[6000410f].
X-RBL-Warning: WORDFILTER: Message failed WORDFILTER test (21)
X-RBL-Warning: WEIGHT10: Weight of 12 reaches or exceeds the limit of
10.
X-Declude-Sender: [EMAIL PROTECTED] [12.4.218.17]
X-Declude-Spoolname: D3b35025200ec0bec.SMD
X-Note: This E-mail was scanned by Declude (www.declude.com) for spam &
virus.
X-Note: This E-mail was filtered for SPAM keywords.
X-Spam-Tests-Failed: ROUTING, SPAMHEADERS, WORDFILTER, WEIGHT10
X-Weight: 12
X-Note: This E-mail was sent from oscar.bnt.com. ([12.4.218.17]).
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 326076559
=====================================================================

Regards,
Kami

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Tuesday, July 30, 2002 8:19 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Adding Weigh to TO:?



>Recently we are noticing a higher incidents of mail coming to us from 
>the
>backup mail server.  This is hosted elsewhere but somehow the SPAM'ers
are 
>sending e-Mail to that server to come to us.  I think they probably
think 
>that we have that server in a WhiteList, therefore it will come
through.

That is becoming a more common trick of spammers.  For those that don't 
know, you can get around this in Declude JunkMail by adding a line in
the 
format "IPBYPASS 192.168.112.1" in the \IMail\Declude\global.cfg file, 
which will scan the mail as if Declude JunkMail was running on the
backup 
mailserver.

>Now the question:  Can we add a weigh to the address used in the To 
>List?

I don't think that is currently possible.  Why would you want to do
that, 
though?
                             -Scott


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to