One thing that I have noticed over the past couple weeks is that the Viagra mails have been coming through a lot.. If you look at the source, there is no way to kill it because they are generating html comments with random characters.. With 8.01, it's supposed to add an X header when you have embedded comments. I have it set to adding the header if just one of the html options is found. Nothing is getting caught.. Is anyone else having this problem?
Thanks, Shad D. Pulley Sr. Systems Engineer IKANO Communications [EMAIL PROTECTED] 801-415-8023 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Forbes Sent: Sunday, July 13, 2003 12:40 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] Antispam features not working very well. I've been running 8.0 with Antispam for about a month now and I have to say that I'm not terribly impressed. We are getting quite a bit of Spam blocked by the software, but a whole lot is getting through as well and plenty that SHOULD be stopped. A great example is the highly used Spam word "Viagra". Now this came setup in the Phrase Filtering by default, but yet I'm getting tons of emails with "Viagra" plain as day in my inbox. Now before you ask, yes it's just "Viagra", it's not an image, it doesn't show any signs of having hidden text in between the letters, and I can copy the word from the email and it pastes exactly as it looks in the email into other documents. It's just plain old "Viagra", nothing tricky about it. I've got quite a few variations of it being blocked in Phrase Filtering as well. I've stopped and started SMTP and the Queue Managers services dozens of times as well. I've checked all my other rules and I don't know how Viagra emails could be getting around Phrase filtering which should forward all emails to my Spam account, but instead they are arriving in user's inboxes. Another question I have is on DNS Blacklists. How do I verify they are actually working? As I understand it, when the message is checked against your blacklists, it's supposed to insert the x-header and pass it on to Content Filtering for further analysis. Well it should have this "X-IMAIL-SPAM-DNSBL" in the header text from there on, shouldn't it? I do have "Delete messages after" enabled for 3 with just Verify Mail From and Verify HELO/EHLO enabled, but since setting it up that way, I've seen absolutely no reduction in Spam getting through. I feel like there is something about the way Anitspam in 8.0 works that I'm not getting, so if anybody with some intelligent insight on this please feel free to pass it along. Thanks, Andy To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
