Hi ..
I understand but the idea is over integrity check before starting more
severe examination of the email.
If email integrity can be easily validated .. in other words if we can
detect extreme violations of common sense quickly then at least we can save time
and effort in filtering and detecting other things..
Regards,
Kami
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: Tuesday, January 20, 2004 2:23 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Underscore in domain..
In Message Sniffer I can code
@$+\_$+\.com
...which means any underscore bounded by any number of letters between an @ and a dotcom.
I want to research a bit more before pulling the trigger on this but it looks like a good rule.
I will also say that I don't remember seeing many (if any) of these in recent history so it might be much to do over very little.
_M
At 01:48 PM 1/20/2004, you wrote:
Hi Matt:
Mailfrom? how?
emails can contain underscore.. we can not filter on the domain only.. or can we?
Kami
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Tuesday, January 20, 2004 1:36 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Underscore in domain..
Kami,
That's not valid. I've also seen some from <jsmith@> which I believe is invalid as well.
to my knowledge, domain names can only have a hyphen or alphanumeric characters. I believe that they can't begin with a hyphen either. They also can't be shorter than two characters except for x.com which slipped through their system (became PayPal several years ago).
Might be a good idea to update the MAILFROM test for these.
Matt
Kami Razvan wrote:
Hi;
Can a domain name have underscore in it?
If not then we should really be in a position not to accept email from domain names that are invalid...
A test that checks for such validity would be great considering we can NOT filter on the domain name alone.
Please_don'[EMAIL PROTECTED]
Kami
==========
X-IMAIL-SPAM-DNSBL: (SPAMCOP,51970536,127.0.0.2)
X-IMAIL-SPAM-DNSBL: (BLARS,51970536,127.1.0.1)
X-IMAIL-SPAM-VALHELO: (51970536)
X-RBL-Warning: HELOBOGUS: Domain see_below.com has no MX or A records [0301].
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: MAILFROM: Domain see_below.com has no MX or A records [0301].
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (line 189, weight 1)
X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (line 45, weight 20)
X-RBL-Warning: FILTER-SPAM-HTML: Message failed FILTER-SPAM-HTML test (line 193, weight 5)
X-Declude-Sender: Please_don'[EMAIL PROTECTED] [203.125.58.130]
X-Declude-Spoolname: D44b4031901e80924.SMD
X-Note: ==================================================================
X-Note: Spam Score: 58 [BLOCKED ON 20+ & DELETED ON 60+]
X-Note: Scan Time: 10:10:08 on 01/20/2004
X-Note: Spool File: D44b4031901e80924.SMD
X-Note: Server Name: see_below.com
X-Note: SMTP Sender: Please_don'[EMAIL PROTECTED]
X-Note: Reverse DNS & IP: bb-203-125-58-130.singnet.com.sg [203.125.58.130]
============-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
