Hi,


This would generate high volume of false/positives. Regular mails can also contain inline images, this is often used.


============================================

Am Montag, 27. März 2006 um 14:56 schrieben Sie:


>

since nearly 99% of spam attaches an inline gif, what about writing a rule to mark it as spam?


Bill


Adam Campbell wrote: 

Add the sender's IP to a custom DNSBL.  Tell antispamseeder it's a spam 

message. 


Do you check for valid helo?  For valid reverse dns?  For valid from? 


I use only IMail for spam-filtering.  Any message that fails a test 

(except valhelo - happens too much on good messages) is diverted.  Any 

message that is diverted in a user's mailbox is also diverted in the 

archive mailbox.  I regularly check the archive mailbox for any good 

messages.  Any good messages diverted I revert/restore in the user's 

mailbox. 


I'm looking into a better solution. 


adamc 


Martin Schaible wrote: 


Hi, 


We analyzed the mail too and we couldn't find any phrase or html construct to create a rule. 


I'm alos wondering how other spam filters are dealing with mails like this. 


============================================ 


Am Montag, 27. Mrz 2006 um 02:47 schrieben Sie: 



here is header---   and below is spam 


This gets right through all my filters 


Received: from web.florida.com [209.208.92.66] by florida.com with ESMTP 


  (SMTPD-9.02) id A8B4046C; Sun, 26 Mar 2006 13:08:52 -0500 


Received: (qmail 5470 invoked from network); 26 Mar 2006 19:46:36 -0000 


Received: from 112.red-213-96-60.staticip.rima-tde.net (213.96.60.112) 


  by web.florida.com with SMTP; 26 Mar 2006 19:46:36 -0000 


From: "Robbins Erik" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>


To: "Roberson Erin" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>


Subject: Re[8]: 


Date: Sun, 26 Mar 2006 18:17:48 +0000 


Message-ID: <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>


MIME-Version: 1.0 


Content-Type: multipart/related; 


 type="multipart/alternative"; 


 boundary="----=_NextPart_000_0DE1_2567A893.4BCF0DE1" 


X-Priority: 3 


X-MSMail-Priority: Normal 


X-Mailer: Microsoft Outlook Express 6.00.2800.1441 


X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 


X-RCPT-TO: <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>


Status: U 


X-UIDL: 440558391 


X-IMail-ThreadID: d8b4090c00000ab7 



However he was not able to pronounce the words before the stranger spoke: 'Of course man is mortal, but that's only half the problem. The trouble is that mortality sometimes comes to him so suddenly! And he cannot even say what he will be doing this evening.' 'What a stupid way of putting the question. ' thought Berlioz and objected : 'Now there you exaggerate. I know more or less exactly what I'm going to be doing this evening. Provided of course that a brick doesn't fall on my head in the street. . .' 'A brick is neither here nor there,' the stranger interrupted persuasively. ' A brick never falls on anyone's head. You in particular, I assure you, are in no danger from that. Your death will be different.' 'Perhaps you know exactly how I am going to die? ' enquired Berlioz with understandable sarcasm at the ridiculous turn that the conversation seemed to be taking. ' Would you like to tell me?' 'Certainly,' rejoined the stranger. He looked Berlioz up and down as though he were measuring him for a suit and muttered through his teeth h rhshs htk tmojrjtkfj p jfj jfnjjjmjj sdjksdfsdfsdlgkj sdflkjsdf lksdjfsdfsdf 

============================================ 


-- 


Mit freundlichen Grssen 



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html 

List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ 

Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ 





============================================


-- 

 

Mit freundlichen Grüssen


--------------------------------------------

Merlin Consulting

Martin Schaible

Bahnhofstrasse 27

CH-8702 Zollikon


Phone:   +41 44 391 30 00

Fax:     +41 44 391 32 49


Mail:    mailto:[EMAIL PROTECTED]

URL:     http://www.merlinconsulting.ch

Support: http://support.merlinconsulting.ch


GPS:     N47 20.235 E8 34.226

--------------------------------------------

News - Neue Produkte:


.:. NOD32 Antivirus System

.:. BlueDragon

.:. Kiwi Syslog Monitor

.:. Paessler GmbH

.:. Sawmill Loganalyzer

.:. SmarterTools

--------------------------------------------



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to