I would be interested to know why the legit messages have a subject line that starts with a space.
One of the servers I maintain is for a real estate company. John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Rick Davidson > Sent: Tuesday, July 06, 2004 11:48 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] SPACE character > > yea it works, but I have been running a test with that today and havent > caught a single spam message but have caught over 30 legit messages... > > Rick Davidson > National Systems Manager > North American Title Group > - > ----- Original Message ----- > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, July 06, 2004 1:52 PM > Subject: RE: [Declude.JunkMail] SPACE character > > > AH, interesting work around. Thanks, I will try that. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Rick Davidson > > Sent: Tuesday, July 06, 2004 10:11 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] SPACE character > > > > I messed around with this and found you can do the following > > > > HEADERS 0 CONTAINS Subject: <-- with two spaces after it > > > > The header formating is "Subject: " with one space after it so theoreticly > > add a second space in your filter rule and it will do what you want. > > > > > > Rick Davidson > > National Systems Manager > > North American Title Group > > - > > ----- Original Message ----- > > From: "Scott Fisher" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, July 06, 2004 12:11 PM > > Subject: Re: [Declude.JunkMail] SPACE character > > > > > > I see a small amount of valid e-mail that starts with a space. > > > > Perhaps > > > > SUBJECT 15 ISSPACE > > Similiar to the ISBLANK option? > > > > Scott Fisher > > Director of IT > > Farm Progress Companies > > > > >>> [EMAIL PROTECTED] 07/06/04 10:59AM >>> > > I have been seeing more spam where the subject line is a single space. > > > > Feature request, add something like this; > > SUBJECT 15 STARTSWITHSPACE > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
