Chris,
This was happening to us too. We recently removed the VALHELO, VALREVDNS,
and VALFROM headers from our rule as they were catching more legit mail than
spam. The change does not seem to have made that much of a difference in the
amount of spam that's come through unblocked.
Noe
----- Original Message -----
From: "Chris Hunt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 09, 2003 1:30 PM
Subject: Re: [IMail Forum] X-Header for Content Filtering
>
> Noe, I get a lot of legit email that is caught by the VALFROM check
>
> How to you handle this issue?
>
> Chris
> [EMAIL PROTECTED]
>
>
> At 12:22 PM 10/09/2003 -0500, you wrote:
> >We have a rule that uses x-headers to filter spam in Imail 8.3. We
initially
> >ran into the same problem of too much legitimate mail getting blocked and
we
> >were able to cut down on that by requiring that multiple instances of the
> >x-headers be reached before a message is blocked.
> >For example:
> > H~X-IMAIL-SPAM-DNSBL{2}:SPAM
> >
> >We also configured the Content filtering (HTML) settings to require that
at
> >least 3 "suspicious" html features must be present before an x-header is
> >inserted.
> >
> >I'm not sure if this helps you, but it seems to be working well for us
when
> >used with declude and the rest of Imail's spam features and a few extra
> >white/black listing rules.
> >
> >Noe
> >
> >----- Original Message -----
> >From: "Mark Gordon" <[EMAIL PROTECTED]>
> >To: <[EMAIL PROTECTED]>
> >Sent: Thursday, October 09, 2003 10:16 AM
> >Subject: [IMail Forum] X-Header for Content Filtering
> >
> >
> >Does anyone have a rule setup to catch mail with the x-header insert
option
> >in 8.x? I had it setup to forward to my spambox, but seems that it also
> >catch legit mail. I want to catch the x-headers to see what tripped it
off
> >so I can remove those entires. Thanks
> >
> >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> >List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> >
> >
> >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> >List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> >---
> >[This E-mail scanned for viruses by Declude/F-Prot AV]
>
> ---
> [This E-mail scanned for viruses by Declude/F-Prot AV]
>
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
