Add a filter like HEADER x CONTAINS X-Fix: GMS fixed non RFC822 compliant EMail message
Replace x with the weight you have assigned to spamheaders/badheaders Markus > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dermot Keenan > Sent: Thursday, February 12, 2004 5:31 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Gordano GMS laundering spam? > > Is anyone here familiar with Gordano Messaging Suite? A > number of our users get mail forwarded from a mail server > using GMS Anti-Spam. Every message from this server has > headers like this: > X-Fix: GMS fixed non RFC822 compliant EMail message > X-Defects: 0000000200000000 [64.84.20.11] > X-AntiSpam: Checked for restricted content by Gordano's > AntiSpam Software > > ... and yet the majority of the messages being forwarded from > this server are SPAM! The big problem I have is that GMS > seems to be "fixing" the headers before forwarding it on and > therefore Declude is not catching much of it. It actually > seems like GMS is laundering the spam to make it more > difficult to detect. Am I missing something here? Can > someone suggest a way to get Declude to catch this stuff? > Even the non-spam messages from this server have these > headers so I can't assume that the X-Fix or X-Defects headers > indicate anything. > > Thanks, > Dermot > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
