[MBF] Re: Gauntlet addition suggestion
Thanks David. A question, why is the following line in GAUNTLET? I realize it can have a high hit rate but with the proliferation of malicious emails that are playing with the encoding, shouldn't this line be removed? BODYEND PCRE(?i:Content-Transfer-Encoding: base64) # This message is sent to you because you are subscribed to the mailing list community@mailsbestfriend.com. To unsubscribe, E-mail to: community-...@mailsbestfriend.com To switch to the DIGEST mode, E-mail to community-dig...@mailsbestfriend.com To switch to the INDEX mode, E-mail to community-in...@mailsbestfriend.com Send administrative queries to community-requ...@mailsbestfriend.com
[MBF] Re: .review
We run SM 13 with Declude/Sniffer - what would be the best filter file to add it to? Is it possible to create a rule that would dump any mail from any TLD over 4 characters? Thanks, Noah From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis Sent: Thursday, August 20, 2015 12:25 PM To: community@mailsbestfriend.com Subject: [MBF] AW: .review Just add a line MAILFROM ENDSWITH .review to one of your existing filter files to push him far above your hold weight. if you really want to block so rough. In the past 7 days I can see exactly 3 messages (out of 336000) coming from .review All of them are clear spam ;-) regards Markus Von: community@mailsbestfriend.com mailto:community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] Im Auftrag von Noah Gesendet: Donnerstag, 20. August 2015 18:08 An: community@mailsbestfriend.com mailto:community@mailsbestfriend.com Betreff: [MBF] .review How do I go about blocking any mail with a .review address? We have seen a lot of them getting through the filters and they are all spam. Thanks, Noah
[MBF] Re: .review
If you have a local.txt filter add a line like this.. where you can block any extensions you want: MAILFROM100PCRE (?i:\.(eu|me|link|rock|xyz|review)$) David Barker Mail's Best Friend Email : mailto:david.bar...@mailsbestfriend.com david.bar...@mailsbestfriend.com Web : http://www.mailsbestfriend.com/ www.mailsbestfriend.com Office: 866.919.2075 From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Noah Sent: Thursday, August 20, 2015 12:08 PM To: community@mailsbestfriend.com Subject: [MBF] .review How do I go about blocking any mail with a .review address? We have seen a lot of them getting through the filters and they are all spam. Thanks, Noah Duarte mailto:n...@resposio.com n...@resposio.com
[MBF] Re: .review
FYI the 4 in the regex means it will trigger on a TLD with 4 characters if
you want it to trigger on more than 4 you would use 5 etc.
David Barker
Mail's Best Friend
Email : mailto:david.bar...@mailsbestfriend.com
david.bar...@mailsbestfriend.com
Web : http://www.mailsbestfriend.com/ www.mailsbestfriend.com
Office: 866.919.2075
From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com]
On Behalf Of David Barker
Sent: Thursday, August 20, 2015 2:52 PM
To: community@mailsbestfriend.com
Subject: [MBF] Re: .review
Create a filter of your choice (e.g. 4TLD) and call it from the Declude
global.cfg the filter should contain the following line/s.
MAILFROM100PCRE (?i:\.[a-z]{4,}$)
REVDNS 100PCRE (?i:\.[a-z]{4,}$)
HELO 100PCRE (?i:\.[a-z]{4,}$)
If you want to delete the messages you could add the following to your
$default$.junkmail
4TLDDELETE
David Barker
Mail's Best Friend
Email : mailto:david.bar...@mailsbestfriend.com
david.bar...@mailsbestfriend.com
Web : http://www.mailsbestfriend.com/ www.mailsbestfriend.com
Office: 866.919.2075
From: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
[mailto:community@mailsbestfriend.com] On Behalf Of Noah
Sent: Thursday, August 20, 2015 1:58 PM
To: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
Subject: [MBF] Re: .review
We run SM 13 with Declude/Sniffer - what would be the best filter file to
add it to?
Is it possible to create a rule that would dump any mail from any TLD over 4
characters?
Thanks,
Noah
From: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
[mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis
Sent: Thursday, August 20, 2015 12:25 PM
To: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
Subject: [MBF] AW: .review
Just add a line
MAILFROM ENDSWITH .review
to one of your existing filter files to push him far above your hold weight.
if you really want to block so rough.
In the past 7 days I can see exactly 3 messages (out of 336000) coming from
.review
All of them are clear spam ;-)
regards
Markus
Von: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
[mailto:community@mailsbestfriend.com] Im Auftrag von Noah
Gesendet: Donnerstag, 20. August 2015 18:08
An: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
Betreff: [MBF] .review
How do I go about blocking any mail with a .review address?
We have seen a lot of them getting through the filters and they are all
spam.
Thanks,
Noah
[MBF] Re: .review
Create a filter of your choice (e.g. 4TLD) and call it from the Declude
global.cfg the filter should contain the following line/s.
MAILFROM100PCRE (?i:\.[a-z]{4,}$)
REVDNS 100PCRE (?i:\.[a-z]{4,}$)
HELO 100PCRE (?i:\.[a-z]{4,}$)
If you want to delete the messages you could add the following to your
$default$.junkmail
4TLDDELETE
David Barker
Mail's Best Friend
Email : mailto:david.bar...@mailsbestfriend.com
david.bar...@mailsbestfriend.com
Web : http://www.mailsbestfriend.com/ www.mailsbestfriend.com
Office: 866.919.2075
From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com]
On Behalf Of Noah
Sent: Thursday, August 20, 2015 1:58 PM
To: community@mailsbestfriend.com
Subject: [MBF] Re: .review
We run SM 13 with Declude/Sniffer - what would be the best filter file to
add it to?
Is it possible to create a rule that would dump any mail from any TLD over 4
characters?
Thanks,
Noah
From: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
[mailto:community@mailsbestfriend.com] On Behalf Of Markus Gufler | Limitis
Sent: Thursday, August 20, 2015 12:25 PM
To: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
Subject: [MBF] AW: .review
Just add a line
MAILFROM ENDSWITH .review
to one of your existing filter files to push him far above your hold weight.
if you really want to block so rough.
In the past 7 days I can see exactly 3 messages (out of 336000) coming from
.review
All of them are clear spam ;-)
regards
Markus
Von: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
[mailto:community@mailsbestfriend.com] Im Auftrag von Noah
Gesendet: Donnerstag, 20. August 2015 18:08
An: community@mailsbestfriend.com mailto:community@mailsbestfriend.com
Betreff: [MBF] .review
How do I go about blocking any mail with a .review address?
We have seen a lot of them getting through the filters and they are all
spam.
Thanks,
Noah
[MBF] .review
How do I go about blocking any mail with a .review address? We have seen a lot of them getting through the filters and they are all spam. Thanks, Noah Duarte mailto:n...@resposio.com n...@resposio.com
[MBF] AW: .review
Just add a line MAILFROM ENDSWITH .review to one of your existing filter files to push him far above your hold weight... if you really want to block so rough. In the past 7 days I can see exactly 3 messages (out of 336000) coming from .review All of them are clear spam ;-) regards Markus Von: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] Im Auftrag von Noah Gesendet: Donnerstag, 20. August 2015 18:08 An: community@mailsbestfriend.com Betreff: [MBF] .review How do I go about blocking any mail with a .review address? We have seen a lot of them getting through the filters and they are all spam. Thanks, Noah Duarte n...@resposio.commailto:n...@resposio.com [Description: resposio-forum]
