Re: [Declude.JunkMail] Any thoughts on blocking bounce messages from spam? spam?

[Matthew Bramble]

John, let me correct myself.  The MAILFROM does in fact most always end 
up being the null sender (RFC compliant I believe).  I'll share what I 
can find if in fact I can get something to work.  I had IMail refuse 
null senders for a very long time until late Summer, but then I noticed 
that my system didn't handle all of the bounces itself (I knew much less 
back then).  Now I'm wondering if I should have just left it off :)

Matt

John Tolmachoff (Lists) wrote:

Well, I have not seen a full blown joe job yet, but it does need to be
looked into. My problem, time. There is none. :((
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Matthew Bramble
Sent: Saturday, January 03, 2004 3:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Any thoughts on blocking bounce messages
from spam? spam? spam? spam? spam? spam? spam? spam? spam?
That ain't all of it by far actually.  A very common one is also
mailer-daemon@, however these are often customized, for instance
[EMAIL PROTECTED], or bounce@, postmaster@, etc.  To have a complete
filter, you would need to figure out the body text that is unique to
each of the mail servers and some ISP's as well.
Time to start testing.  This is problematic because a good filter for
this can't FP on legit E-mail, and you can't make use of weighting for
it to work if you are going to try to put this stuff in a sub-directory.
Matt

John Tolmachoff (Lists) wrote:

   

I'm surprised that I haven't been hearing more people talking about this
issue.
       

I have been seeing it, but have been extremely busy with other stuff.
     

Right
   

now, those are being caught to HOLD with filtering on MAILFROM CONTAINS
     

<>.
   

John Tolmachoff
Engineer/Consultant/Owner
eServices For You
     



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.