There are a couple of things that may help. The biggest problem is that in the last two weeks the spammers have picked things up a notch as well.
Are you creating your own blacklist? I have set SpamReview so that when I add things to the IMail kill file, it actually saves to my blacklist. What I do is open SpamReview and return to Queue all mail that is not spam then sort by domain name and [Ctrl] click on each domain I know will only send spam. I skip the domain names like yahoo.com and such. Then just click on the "Add to Kill File" button and all the selected domains will be added to the file. Only add each domain once. When changing the SpamReview settings check the box that adds the domain to the kill, not the specific address. After that step I will normally go in and remove all the "@" signs and also shorten the domain if there are more than one "." in the domain name. (Change bounce.mx001.bubba.junkmail.com to 'junkmail.com') I have been adding about 20-30 domains to the list every day and currently deleting 1100 message a day with that blacklist. I am also currently sharing blacklists that Mike and Rex maintain on our agency mail server, so I have two blacklists. If you don't have a blacklist file setup yet see the Declude manual on the web. This will only allow me to delete more of the mail I put on hold though. If you have or upgrade to Junkmail Pro there is an option that will allow filters to be set to look at different items. I have recently looked at two filters someone has developed that I would think could kill or hold more mail. Look at http://www.mailpure.com/software/decludefilters/ The GIBBERISH filter looks for random characters in a message and will allow you to flag messages accordingly. The main problem is you need PRO for it to work. In the past I have told schools that LITE would work fine, and I would expect you are running LITE. A copy of my Declude files can be found at ftp://fosseen.us/stars/Declude/ If you have not updated your declude files in a while there have been several changes including some tests sites that no longer work, and how I have the blacklists setup. I have also included a copy of my current blacklist. I know Tim is running a 3rd party program called Message Sniffer http://www.sortmonster.com/ I don't know how effective it has been on this new round of spam, I know they are adding updates faster now according to the messages Let me know if you have any questions. _____________________________________________________________________ Scott Fosseen - Systems Engineer -Prairie Lakes AEA http://fosseen.us/scott _____________________________________________________________________ Research by the U.S. Navy has determined that water freezes in cold weather. - Southfield Michigan newspaper _____________________________________________________________________ ----- Original Message ----- From: "JON W HUESER" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 30, 2003 11:53 AM Subject: [info-tech] Spam Question > I am using Imail and Declude and it is doing a good job with catching spam. My problem is that more and more of the spam seems to be coming in with web coding embedded in it so it is web page like and I am getting a lot of spam emails with broken words or unusually characters in them. > > Does anyone have an idea on how to stop these. > > Just wondering if anyone else is having these problems? > > -- > Thanks, > Jon W. Hueser > Comp/Tech. Coord. > East Greene Comm. Schools > 405 12th Str. South > Box 377 > Grand Junction, IA 50107 > Phone: 515-738-2411 ext. 241 > Fax: 515-738-5719 > Website: www.east-greene.k12.ia.us > -- > > ------------------------------------------------------------ > The content of this email and any attachments are confidential and intended for the named recipient(s) only. > > If you have received this email in error please notify the sender immediately. > > Do not disclose the content of this message or make copies. > --- > [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] > > --------------------------------------------------------- > Archived messages from this list can be found at: > http://www.mail-archive.com/[EMAIL PROTECTED]/ > --------------------------------------------------------- > --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --------------------------------------------------------- Archived messages from this list can be found at: http://www.mail-archive.com/[EMAIL PROTECTED]/ ---------------------------------------------------------
