|
Thank you for the help. Lol, I
think I just stepped out of the frying pan and into the fire.
:)
I have let my declude config sit idle for
about 8 - 12 months and I see I am now Way behind you Rocket
Scientists. Time to do some catching up.
----- Original Message -----
Sent: Tuesday, December 06, 2005 3:34
PM
Subject: Re: [Declude.JunkMail] Spam with
gif getting through
Hi Todd,
Todd wrote:
Quite a bit of spam has been getting though
lately. IPR tests are not stopping it and it only contains gif as the
message body. I am including one of gifs. Any way to stop
this?
I use three filters - 2 have to
kick off for the third to fire which will award the points against the email.
So far I have had good success.
#FILTER.STOCKSPAMMER.SUBJECT
SKIPIFWEIGHT
26
SUBJECT 0 CONTAINS
Press Release
SUBJECT 0
CONTAINS news
SUBJECT
0 CONTAINS Stock
Profiler
SUBJECT 0
CONTAINS Re[
SUBJECT
0 CONTAINS Stock
in
SUBJECT 0 CONTAINS
winner
#FILTER.STOCKSPAMMER.BODY
BODY
END NOTCONTAINS Content-Type:
image/gif
BODY END
NOTCONTAINS Content-Transfer-Encoding:
base64
BODY END
NOTCONTAINS Content-Disposition: inline;
filename
REMOTEIP 0 CONTAINS
.
#COMBO.STOCKSPAMMER
TESTSFAILED
END NOTCONTAINS
FILTER.STOCKSPAMMER.BODY
TESTSFAILED
END NOTCONTAINS
FILTER.STOCKSPAMMER.SUBJECT
TESTSFAILED
3 CONTAINS
TEST.BADHEADERS
TESTSFAILED 3
CONTAINS TEST.REVDNS
TESTSFAILED
3 CONTAINS
TEST.SPAMHEADERS
TESTSFAILED 6
CONTAINS FILTER.FOREIGN
TESTSFAILED
3 CONTAINS
FILTER.REV_DNS_PHONES
TESTSFAILED 3
CONTAINS IP4R.BLACKHOLE
TESTSFAILED
3 CONTAINS
EXTERNAL.CIP.
TESTSFAILED 3
CONTAINS TEST.DYNHELO
TESTSFAILED
3 CONTAINS
TEST.MAILFROM
TESTSFAILED 6
CONTAINS
FILTER.COMBO.DYNA.IPBYPASS
REMOTEIP 0
CONTAINs .
-Nick
Todd wrote:
Quite a bit of spam has been getting though
lately. IPR tests are not stopping it and it only contains gif as the
message body. I am including one of gifs. Any way to stop
this?
Thanks
Todd
Have not been very active lately so please
excuse me if this has been covered
|
