Hi Karl, Post a sample with full headers so we can see what the scofflaw is sending you -Nick Karl Hentschel wrote: Thanks for the tip, but unfortunately I am not using the Pro version of Declude so I cannot create my own filters. Are others being slammed with stock spam recently? Declude is blocking several hundred of them a day, but many are still slipping through without failing any or very few tests. Is it possible to block with the country chain? I noticed that they are coming from out of the country. How is everyone dealing with these?-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott Fisher Sent: Monday, November 06, 2006 11:27 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Spam not being caught This filter will work for targeting CMDSPACE with a gif attachment. You might want to SKIPIFWEIGHT 315 STOPATFIRSTHIT BODY END NOTCONTAINS Content-Type: image/gif TESTSFAILED END NOTCONTAINS CMDSPACE BODY 100 CONTAINS img src="" BODY 100 CONTAINS src="" class="moz-txt-link-rfc2396E" href="">"cid: BODY 100 CONTAINS src=""moz-txt-link-rfc2396E" href="">"cid: BODY 100 CONTAINS src="">= cid: ----- Original Message ----- From: "Karl Hentschel" <[EMAIL PROTECTED]> To: <Declude.JunkMail@declude.com> Sent: Monday, November 06, 2006 12:58 PM Subject: [Declude.JunkMail] Spam not being caughtWe have been getting quite a bit of SPAM, usually about stocks that is not being caught by Declude. I have the newest version of Declude, updated filter files from Imail, invURIBL, trial version of Sniffer. These emails are typically only failing cmdspace and helobogus, not enough to get blocked. Has anyone had any success blocking these recent floods of emails? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. |
- RE: [Declude.JunkMail] [OT] Drop Connection O... John Doyle
- Re: [Declude.JunkMail] [OT] Drop Connect... Dean Lawrence
- [Declude.JunkMail] Analyzing junkmail lo... Karl Hentschel
- Re: [Declude.JunkMail] Analyzing jun... Darrell \([EMAIL PROTECTED])
- RE: [Declude.JunkMail] Analyzing... Craig Edmonds
- RE: [Declude.JunkMail] Analyzing... Craig Edmonds
- Re: [Declude.JunkMail] Analyzing jun... Heimir Eidskrem
- [Declude.JunkMail] Spam not being caught Karl Hentschel
- Re: [Declude.JunkMail] Spam not bein... Scott Fisher
- RE: [Declude.JunkMail] Spam not ... Karl Hentschel
- Re: [Declude.JunkMail] Spam ... Nick Hayer
- Re: [Declude.JunkMail] Spam ... Karl Hentschel
- Re: [Declude.JunkMail] Spam ... Nick Hayer
- Re: [Declude.JunkMail] Spam ... Scott Fisher
- Re: [Declude.JunkMail] Spam ... Nick Hayer
- Re: [Declude.JunkMail] Spam ... Nick Hayer
- [Declude.JunkMail] CMDSPACE/... Michael Jaworski
- Re: [Declude.JunkMail] CMDSP... David Franco-Rocha
- RE: [Declude.JunkMail] CMDSP... Michael Jaworski
- [Declude.JunkMail] Unsubscri... Harry Palmer
- Re: [Declude.JunkMail] Unsub... Matt