Hi Adam, > Add the sender's IP to a custom DNSBL You're right. Usualy those mails are from zombie-PC's. you would add ip-addresses until the rest of you life.
============================================ Am Montag, 27. März 2006 um 14:44 schrieben Sie: > Add the sender's IP to a custom DNSBL. Tell antispamseeder it's a spam > message. > Do you check for valid helo? For valid reverse dns? For valid from? > I use only IMail for spam-filtering. Any message that fails a test > (except valhelo - happens too much on good messages) is diverted. Any > message that is diverted in a user's mailbox is also diverted in the > archive mailbox. I regularly check the archive mailbox for any good > messages. Any good messages diverted I revert/restore in the user's > mailbox. > I'm looking into a better solution. > adamc > Martin Schaible wrote: >> Hi, >> >> We analyzed the mail too and we couldn't find any phrase or html >> construct to create a rule. >> >> I'm alos wondering how other spam filters are dealing with mails like this. >> >> ============================================ >> >> Am Montag, 27. März 2006 um 02:47 schrieben Sie: >> >> >> here is header--- and below is spam >> >> >> This gets right through all my filters >> >> Received: from web.florida.com [209.208.92.66] by florida.com with ESMTP >> >> (SMTPD-9.02) id A8B4046C; Sun, 26 Mar 2006 13:08:52 -0500 >> >> Received: (qmail 5470 invoked from network); 26 Mar 2006 19:46:36 -0000 >> >> Received: from 112.red-213-96-60.staticip.rima-tde.net (213.96.60.112) >> >> by web.florida.com with SMTP; 26 Mar 2006 19:46:36 -0000 >> >> From: "Robbins Erik" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> >> >> To: "Roberson Erin" <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> >> >> Subject: Re[8]: >> >> Date: Sun, 26 Mar 2006 18:17:48 +0000 >> >> Message-ID: >> <[EMAIL PROTECTED] >> <mailto:[EMAIL PROTECTED]>> >> >> MIME-Version: 1.0 >> >> Content-Type: multipart/related; >> >> type="multipart/alternative"; >> >> boundary="----=_NextPart_000_0DE1_2567A893.4BCF0DE1" >> >> X-Priority: 3 >> >> X-MSMail-Priority: Normal >> >> X-Mailer: Microsoft Outlook Express 6.00.2800.1441 >> >> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 >> >> X-RCPT-TO: <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> >> >> Status: U >> >> X-UIDL: 440558391 >> >> X-IMail-ThreadID: d8b4090c00000ab7 >> >> >> However he was not able to pronounce the words before the stranger >> spoke: 'Of course man is mortal, but that's only half the problem. The >> trouble is that mortality sometimes comes to him so suddenly! And he >> cannot even say what he will be doing this evening.' 'What a stupid way >> of putting the question. ' thought Berlioz and objected : 'Now there you >> exaggerate. I know more or less exactly what I'm going to be doing this >> evening. Provided of course that a brick doesn't fall on my head in the >> street. . .' 'A brick is neither here nor there,' the stranger >> interrupted persuasively. ' A brick never falls on anyone's head. You in >> particular, I assure you, are in no danger from that. Your death will be >> different.' 'Perhaps you know exactly how I am going to die? ' enquired >> Berlioz with understandable sarcasm at the ridiculous turn that the >> conversation seemed to be taking. ' Would you like to tell me?' >> 'Certainly,' rejoined the stranger. He looked Berlioz up and down as >> though he were measuring him for a suit and muttered through his teeth h >> rhshs htk tmojrjtkfj p jfj jfnjjjmjj sdjksdfsdfsdlgkj sdflkjsdf >> lksdjfsdfsdf >> >> ============================================ >> >> -- >> >> Mit freundlichen Grüssen > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ============================================ -- Mit freundlichen Grüssen -------------------------------------------- Merlin Consulting Martin Schaible Bahnhofstrasse 27 CH-8702 Zollikon Phone: +41 44 391 30 00 Fax: +41 44 391 32 49 Mail: mailto:[EMAIL PROTECTED] URL: http://www.merlinconsulting.ch Support: http://support.merlinconsulting.ch GPS: N47 20.235 E8 34.226 -------------------------------------------- News - Neue Produkte: .:. NOD32 Antivirus System .:. BlueDragon .:. Kiwi Syslog Monitor .:. Paessler GmbH .:. Sawmill Loganalyzer .:. SmarterTools -------------------------------------------- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
