RE: [IMail Forum] Spam being detected but still being delivered

[Remo Pistor]

Thanks, Scott and Travis.   Scott, I have the rules setup at the host level.  What’s weird is that some messages get caught but some slip through?   Travis, I have tried both caps and lower case and in both cases I did not have the Case Sensitive box checked.     >if all else fails, contact  tech  at ipswitch -- they are more set up for >total hand holding than a user forum. Karen, I’m not even going to validate your ignorant cheap shot with a response! What did I do to you?     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, August 21, 2003 10:12 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] message.zip     >Oh my god!!! > >What does it take to get any help around here?? Sorry about that -- there seem to be 2 people here that don't like our product mentioned here, and when they complain, our customers often have a differing opinion, which causes those extra messages. >Please, can someone offer some advise on an issue that I have?  Re: (Post) >Spam being detected but still being delivered. I'm not very familiar with IMail v8's anti-spam, but I'll give it a shot. It seems that your problem is that spam is getting the X- header added, but the E-mail isn't deleted.  It seems that you want the X- header added, and it is being added.  So your question is "Given the X- header, how do I delete the E-mail?" For that, you would need an IMail rule that looks for the X- header, and deletes based on it.  You posted that you have rules -- but where are they (one specific user's rules, for example)?  It sounds like the rules you added aren't getting used for all recipients.                                                     -Scott   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Travis Rabe Sent: Thursday, August 21, 2003 10:25 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Spam being detected but still being delivered   Remo,   Did you use the Case Sensitive box in the Imail rules?  If so, all of your rules are lower case and the header has them as upper case.  I would try making them all CAPs just in case.   Travis     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Remo Pistor Sent: Thursday, August 21, 2003 8:12 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Spam being detected but still being delivered Actually this is my list of rules:   H~x-imail-spam-dnsbl:[EMAIL PROTECTED] H~x-imail-spam-statistics!AND!H~x-imail-spam-valrevdns:NUL H~x-imail-spam-statistics!AND!H~x-imail-spam-valfrom:NUL H~x-imail-spam-statistics:[EMAIL PROTECTED] H~x-imail-spam-html:[EMAIL PROTECTED] H~x-imail-spam-url:[EMAIL PROTECTED]       -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tripp Allen Sent: Wednesday, August 20, 2003 4:40 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Spam being detected but still being delivered   You need a rule to look for the spam headers that will delete, forward or store the messages in a sub mailbox.    Tripp   ----- Original Message ----- From: Remo Pistor   To: [EMAIL PROTECTED] Sent: Wednesday, August 20, 2003 6:37 PM Subject: [IMail Forum] Spam being detected but still being delivered   I have V8.02 and V8 before that.  I have implemented the spam filtering and it has been working very well except for the last little while.  It has been brought to my attention that there is spam that is being tagged with the X-IMAIL-SPAM…  header but is still being delivered.  I have tried everything to stop the spam that is slipping through, but I can’t stop it and I don’t know why.   Here is a header of a spam message that was delivered in spite of the X-IMAIL-SPAM header inserts.  Can anyone help?   Received: from 200-161-7-149.speedyterra.com.br [200.161.7.149] by nt5.pacificgroup.net   (SMTPD32-8.02) id AF8B5FD90114; Wed, 20 Aug 2003 11:35:55 -0700 Received: from cq.6vk1r.net [43.238.103.206] by 200-161-7-149.speedyterra.com.br with ESMTP id <110395-59874>; Wed, 20 Aug 2003 13:21:43 -0600 Message-ID: <[EMAIL PROTECTED]> From: "Financial Blvd." <@prihosAt.com> To: [EMAIL PROTECTED] Subject: Find out if your mortgage rate is too high, NOW. Free Search Date: Wed, 20 Aug 03 13:21:43 GMT X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) MIME-Version: 1.0 Content-Type: multipart/alternative;           boundary="BD.A_1_F_24_.2.768.." X-Priority: 3 X-MSMail-Priority: Normal X-IMAIL-SPAM-DNSBL: (SpamCop,1608057108,127.0.0.2) X-IMAIL-SPAM-VALFROM: (1608057108) X-IMAIL-SPAM-STATISTICS: 1.0000 X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 353970070     Thanks in advance, Remo