I found the below rules in the rules.ima file takes care of a good majority
of incoming spam with minimal risk of deleting valid messages:
F!~@:NUL
T!~@:NUL
H!~\sTo\::NUL
S~\s\s\s\d\d\d:NUL
S~adv\::NUL
The first two rules take care of messages without an email address in the
FROM or TO fields. These seach for the @ character to make sure it's
present.
The third filter makes sure the TO field is actually there and deletes any
messages without it. Isn't the lack of a TO field or not having a properly
formatted email addresses in the TO and FROM fields RFC violations? If so,
no one should feel uneasy about the first 3 filters.
The fourth is the best filter I have found to date. Much of the spam that
comes in have a number spaced out to the far right on the subject line. So
this filter simply looks for at least 3 spaces preceeding at least 3 digits
in the subject line. You'd be surprised how effective this one filter is!
The last one simple looks for "adv:" in the subject.
Anyone have anymore that are effective and relatively safe from deleting
valid mail?
Steven Plautz
Sr. ISP Systems Admin
Omega Communications - Sybercom
[EMAIL PROTECTED]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
