Yeah, what Matt said.

Chipping in another 2 cents, the "?stderr." in particular I find in bulk
mail as opposed to spam mail, and they are more likely to have a a valid
opt-out routine that works like you expect it to work.

I believe that is a built-in feature with Postfix and SendMail.

Andrew 8)

-----Original Message-----
From: Matt [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 17, 2004 8:24 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] if there's a "?" in the X-Declude-Sender


That's a bad assumption IMO.  This is known as Variable Envelope Return 
Path or VERP.  It is used by many legitimate bulk mailers to properly 
handle bounces for undeliverable messages so that they can automatically

remove bad addresses after so many failures.  Some bulk mailers are of 
course legitimate, and adding a filter for jus the "?" would 
indiscriminately target VERP and not necessarily target the spam.

Matt



Paul Fuhrmeister wrote:

>Here's the X-Declude-Sender in a spam message. It includes my domain 
>name and a "?":
>
>X-Declude-Sender: [EMAIL PROTECTED]
>[65.249.245.10]
>
>How would one add weight if there's a "?" in the X-Declude-Sender? I 
>assume this is a valid test to add weight.
>
>[EMAIL PROTECTED]
>
>---
>[This E-mail was scanned for viruses by Declude Virus 
>(http://www.declude.com)]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To 
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>"unsubscribe Declude.JunkMail".  The archives can be found at 
>http://www.mail-archive.com.
>
>
>  
>

-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to