RE: [Declude.JunkMail] Subject Starts with

2003-12-26 Thread John Tolmachoff \(Lists\)
Well, I can say I have not seen any legit with a subject that starts with a
space, but I have seen a number of spam that does.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Thursday, December 25, 2003 7:06 PM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Subject Starts with
 
 
   I am seeing a good amount of spam where the subject line starts with
 a
   space
   and then some character and then the subject.
  
   Ah, good idea -- I'll see if we can add that.
 
 Will it be added?
 
 It hasn't been determined yet.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask about our free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Subject Starts with

2003-12-25 Thread R. Scott Perry

 I am seeing a good amount of spam where the subject line starts with a
 space
 and then some character and then the subject.

 Ah, good idea -- I'll see if we can add that.

Will it be added?
It hasn't been determined yet.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Subject Starts with

2003-12-24 Thread John Tolmachoff \(Lists\)
Will it be added?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Monday, December 01, 2003 12:08 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Subject Starts with
 
 
 Scott, feature request. (Sigh, another one.)
 
 Can you add something like this:
 
 SUBJECT 0 STARTSWITHSPACE
 
 I am seeing a good amount of spam where the subject line starts with a
 space
 and then some character and then the subject.
 
 Ah, good idea -- I'll see if we can add that.
 
 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
 Declude Virus: Catches known viruses and is the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask about our free 30-day evaluation.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Subject Starts with

2003-12-02 Thread Pete McNeil
I recommend a simple scheme of simple characters and escape sequences.
Borrowing from our Message Sniffer rule coding, how about _ as a space,
and if you really need the _ character itself then you use \_. Then you
also have to use \\ when you want the \, but that's a small price to pay
and it's easy to code.

Just a thought.
_M

|-Original Message-
|From: [EMAIL PROTECTED] 
|[mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
|Sent: Monday, December 01, 2003 5:54 PM
|To: [EMAIL PROTECTED]
|Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
|[Bill] [stranger] [things] [have] [happened] [in] [the] [past].
|
|[space] [may] [not] [be] [used] [but] [starting] [reserve] 
|[words] [can] [start] [a] [precedent] [that] [could] [make] 
|[filtering] [and] [debugging] [a] [nightmare].
|
|[Regards,] [:)]
|[Kami]
|
|
|-Original Message-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
|Sent: Monday, December 01, 2003 5:32 PM
|To: [EMAIL PROTECTED]
|Subject: Re: [Declude.JunkMail] Subject Starts with
|
|It's not really a reserved word since the suggestion was 
|space enclosed in square brackets - how often have you seen 
|that used in a sentence:  wow, I really [space] out sometimes...  ;-)
|
|Bill
|- Original Message -
|From: John Tolmachoff (Lists) [EMAIL PROTECTED]
|To: [EMAIL PROTECTED]
|Sent: Monday, December 01, 2003 1:27 PM
|Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
| I have to agree with Kami. I would rather not define reserved words.
|
| John Tolmachoff
| Engineer/Consultant/Owner
| eServices For You
|
|
|  -Original Message-
|  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
|  [EMAIL PROTECTED] On Behalf Of Kami Razvan
|  Sent: Monday, December 01, 2003 12:36 PM
|  To: [EMAIL PROTECTED]
|  Subject: RE: [Declude.JunkMail] Subject Starts with
| 
|  Matt..
| 
|  This is scary .. Now you are suggesting we start defining reserve
|words..
| 
|  This way, if it starts a trend, we can not filter on [space] 
|  anymore..
| 
|  Just a thought.
| 
|  Kami
| 
| 
|  -Original Message-
|  From: [EMAIL PROTECTED]
|  [mailto:[EMAIL PROTECTED] On Behalf Of Matthew 
|  Bramble
|  Sent: Monday, December 01, 2003 3:23 PM
|  To: [EMAIL PROTECTED]
|  Subject: Re: [Declude.JunkMail] Subject Starts with
| 
|  Scott,
| 
|  Instead of adding it a command, how about you just create a 
|  substitution string for space, i.e. [space].  This way it could be 
|  used in this fashion, as well as before some words (as a delimiter 
|  in the sense that Bill earlier
|  suggested).
| 
|  SUBJECT  0  BEGINSWITH  [space]
|  BODY  0  CONTAINS  [space]ass
| 
|  Matt
| 
| 
| 
|  R. Scott Perry wrote:
| 
|  
|   Scott, feature request. (Sigh, another one.)
|  
|   Can you add something like this:
|  
|   SUBJECT 0 STARTSWITHSPACE
|  
|   I am seeing a good amount of spam where the subject line starts 
|   with a space and then some character and then the subject.
|  
|  
|   Ah, good idea -- I'll see if we can add that.
|  
|  -Scott
|  
| 
|  ---
|  [This E-mail was scanned for viruses by Declude Virus 
|  (http://www.declude.com)]
| 
|  ---
|  This E-mail came from the Declude.JunkMail mailing list.  To
|unsubscribe,
|  just send an E-mail to [EMAIL PROTECTED], and type unsubscribe 
|  Declude.JunkMail.  The archives can be found at 
|  http://www.mail-archive.com.
| 
|  ---
|  [This E-mail was scanned for viruses by Declude Virus 
|  (http://www.declude.com)]
| 
|  ---
|  This E-mail came from the Declude.JunkMail mailing list.  To 
|  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
|  unsubscribe Declude.JunkMail.  The archives can be found at 
|  http://www.mail-archive.com.
|
| ---
| [This E-mail was scanned for viruses by Declude Virus
|(http://www.declude.com)]
|
| ---
| This E-mail came from the Declude.JunkMail mailing list.  To 
| unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
| unsubscribe Declude.JunkMail.  The archives can be found at 
| http://www.mail-archive.com.
|
| .com.
|
|
|---
|[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can

RE: [Declude.JunkMail] Subject Starts with

2003-12-02 Thread Pete McNeil
Ha ha ha! plop... (laughs his head off)

|-Original Message-
|From: [EMAIL PROTECTED] 
|[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
|Sent: Monday, December 01, 2003 6:22 PM
|To: [EMAIL PROTECTED]
|Subject: Re: [Declude.JunkMail] Subject Starts with
|
|
|Oh, yes, now it get it...  [eye rolling out of head onto floor]  ;-)
|
|Bill
|- Original Message - 
|From: Kami Razvan [EMAIL PROTECTED]
|To: [EMAIL PROTECTED]
|Sent: Monday, December 01, 2003 2:53 PM
|Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
| [Bill] [stranger] [things] [have] [happened] [in] [the] [past].
|
| [space] [may] [not] [be] [used] [but] [starting] [reserve] [words] 
| [can] [start] [a] [precedent] [that] [could] [make] [filtering] [and]
|[debugging]
| [a] [nightmare].
|
| [Regards,] [:)]
| [Kami]
|
|
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
| Sent: Monday, December 01, 2003 5:32 PM
| To: [EMAIL PROTECTED]
| Subject: Re: [Declude.JunkMail] Subject Starts with
|
| It's not really a reserved word since the suggestion was space 
| enclosed
|in
| square brackets - how often have you seen that used in a sentence:  
| wow, I really [space] out sometimes...  ;-)
|
| Bill
| - Original Message -
| From: John Tolmachoff (Lists) [EMAIL PROTECTED]
| To: [EMAIL PROTECTED]
| Sent: Monday, December 01, 2003 1:27 PM
| Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
|  I have to agree with Kami. I would rather not define 
|reserved words.
| 
|  John Tolmachoff
|  Engineer/Consultant/Owner
|  eServices For You
| 
| 
|   -Original Message-
|   From: [EMAIL PROTECTED] 
|[mailto:Declude.JunkMail- 
|   [EMAIL PROTECTED] On Behalf Of Kami Razvan
|   Sent: Monday, December 01, 2003 12:36 PM
|   To: [EMAIL PROTECTED]
|   Subject: RE: [Declude.JunkMail] Subject Starts with
|  
|   Matt..
|  
|   This is scary .. Now you are suggesting we start defining reserve
| words..
|  
|   This way, if it starts a trend, we can not filter on [space] 
|   anymore..
|  
|   Just a thought.
|  
|   Kami
|  
|  
|   -Original Message-
|   From: [EMAIL PROTECTED]
|   [mailto:[EMAIL PROTECTED] On Behalf Of Matthew
|Bramble
|   Sent: Monday, December 01, 2003 3:23 PM
|   To: [EMAIL PROTECTED]
|   Subject: Re: [Declude.JunkMail] Subject Starts with
|  
|   Scott,
|  
|   Instead of adding it a command, how about you just create a
|substitution
|   string for space, i.e. [space].  This way it could be 
|used in this 
|   fashion, as well as before some words (as a delimiter in 
|the sense 
|   that Bill earlier
|   suggested).
|  
|   SUBJECT  0  BEGINSWITH  [space]
|   BODY  0  CONTAINS  [space]ass
|  
|   Matt
|  
|  
|  
|   R. Scott Perry wrote:
|  
|   
|Scott, feature request. (Sigh, another one.)
|   
|Can you add something like this:
|   
|SUBJECT 0 STARTSWITHSPACE
|   
|I am seeing a good amount of spam where the subject 
|line starts
|with
|a space and then some character and then the subject.
|   
|   
|Ah, good idea -- I'll see if we can add that.
|   
|   -Scott
|   
|  
|   ---
|   [This E-mail was scanned for viruses by Declude Virus 
|   (http://www.declude.com)]
|  
|   ---
|   This E-mail came from the Declude.JunkMail mailing list.  To
| unsubscribe,
|   just send an E-mail to [EMAIL PROTECTED], and type 
|unsubscribe 
|   Declude.JunkMail.  The archives can be found at 
|   http://www.mail-archive.com.
|  
|   ---
|   [This E-mail was scanned for viruses by Declude Virus 
|   (http://www.declude.com)]
|  
|   ---
|   This E-mail came from the Declude.JunkMail mailing list.  To 
|   unsubscribe, just send an E-mail to 
|[EMAIL PROTECTED], and type 
|   unsubscribe Declude.JunkMail.  The archives can be found at 
|   http://www.mail-archive.com.
| 
|  ---
|  [This E-mail was scanned for viruses by Declude Virus
| (http://www.declude.com)]
| 
|  ---
|  This E-mail came from the Declude.JunkMail mailing list.  To 
|  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
|  unsubscribe Declude.JunkMail.  The archives can be found at 
|  http://www.mail-archive.com.
| 
|  .com.
| 
|
| ---
| [This E-mail was scanned for viruses by Declude Virus 
| (http://www.declude.com)]
|
| ---
| This E-mail came from the Declude.JunkMail mailing list.  To 
| unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
| unsubscribe Declude.JunkMail.  The archives can be found at 
| http://www.mail-archive.com.
|
| ---
| [This E-mail was scanned for viruses by Declude Virus
|(http://www.declude.com)]
|
| ---
| This E-mail came from the Declude.JunkMail mailing list.  To 
| unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
| unsubscribe Declude.JunkMail.  The archives can be found at 
| http://www.mail-archive.com.
|
|
|---
|[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from

RE: [Declude.JunkMail] Subject Starts with

2003-12-02 Thread Colbeck, Andrew
newbieOooh! Scott, how about you *just* implement in the next interim full
regexp text processing like product X along with MIME decoding like product
Y, MIME error handling like product Z, with a whole new filtering grammar
that lets us specify the layer of decoding at which the text filter line is
run?/newbie

Andrew ;)

-Original Message-
From: Pete McNeil [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 02, 2003 6:50 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Subject Starts with


I recommend a simple scheme of simple characters and escape sequences.
Borrowing from our Message Sniffer rule coding, how about _ as a space,
and if you really need the _ character itself then you use \_. Then you
also have to use \\ when you want the \, but that's a small price to pay
and it's easy to code.

Just a thought.
_M

|-Original Message-
|From: [EMAIL PROTECTED] 
|[mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
|Sent: Monday, December 01, 2003 5:54 PM
|To: [EMAIL PROTECTED]
|Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
|[Bill] [stranger] [things] [have] [happened] [in] [the] [past].
|
|[space] [may] [not] [be] [used] [but] [starting] [reserve] 
|[words] [can] [start] [a] [precedent] [that] [could] [make] 
|[filtering] [and] [debugging] [a] [nightmare].
|
|[Regards,] [:)]
|[Kami]
|
|
|-Original Message-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
|Sent: Monday, December 01, 2003 5:32 PM
|To: [EMAIL PROTECTED]
|Subject: Re: [Declude.JunkMail] Subject Starts with
|
|It's not really a reserved word since the suggestion was 
|space enclosed in square brackets - how often have you seen 
|that used in a sentence:  wow, I really [space] out sometimes...  ;-)
|
|Bill
|- Original Message -
|From: John Tolmachoff (Lists) [EMAIL PROTECTED]
|To: [EMAIL PROTECTED]
|Sent: Monday, December 01, 2003 1:27 PM
|Subject: RE: [Declude.JunkMail] Subject Starts with
|
|
| I have to agree with Kami. I would rather not define reserved words.
|
| John Tolmachoff
| Engineer/Consultant/Owner
| eServices For You
|
|
|  -Original Message-
|  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
|  [EMAIL PROTECTED] On Behalf Of Kami Razvan
|  Sent: Monday, December 01, 2003 12:36 PM
|  To: [EMAIL PROTECTED]
|  Subject: RE: [Declude.JunkMail] Subject Starts with
| 
|  Matt..
| 
|  This is scary .. Now you are suggesting we start defining reserve
|words..
| 
|  This way, if it starts a trend, we can not filter on [space] 
|  anymore..
| 
|  Just a thought.
| 
|  Kami
| 
| 
|  -Original Message-
|  From: [EMAIL PROTECTED]
|  [mailto:[EMAIL PROTECTED] On Behalf Of Matthew 
|  Bramble
|  Sent: Monday, December 01, 2003 3:23 PM
|  To: [EMAIL PROTECTED]
|  Subject: Re: [Declude.JunkMail] Subject Starts with
| 
|  Scott,
| 
|  Instead of adding it a command, how about you just create a 
|  substitution string for space, i.e. [space].  This way it could be 
|  used in this fashion, as well as before some words (as a delimiter 
|  in the sense that Bill earlier
|  suggested).
| 
|  SUBJECT  0  BEGINSWITH  [space]
|  BODY  0  CONTAINS  [space]ass
| 
|  Matt
| 
| 
| 
|  R. Scott Perry wrote:
| 
|  
|   Scott, feature request. (Sigh, another one.)
|  
|   Can you add something like this:
|  
|   SUBJECT 0 STARTSWITHSPACE
|  
|   I am seeing a good amount of spam where the subject line starts 
|   with a space and then some character and then the subject.
|  
|  
|   Ah, good idea -- I'll see if we can add that.
|  
|  -Scott
|  
| 
|  ---
|  [This E-mail was scanned for viruses by Declude Virus 
|  (http://www.declude.com)]
| 
|  ---
|  This E-mail came from the Declude.JunkMail mailing list.  To
|unsubscribe,
|  just send an E-mail to [EMAIL PROTECTED], and type unsubscribe 
|  Declude.JunkMail.  The archives can be found at 
|  http://www.mail-archive.com.
| 
|  ---
|  [This E-mail was scanned for viruses by Declude Virus 
|  (http://www.declude.com)]
| 
|  ---
|  This E-mail came from the Declude.JunkMail mailing list.  To 
|  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
|  unsubscribe Declude.JunkMail.  The archives can be found at 
|  http://www.mail-archive.com.
|
| ---
| [This E-mail was scanned for viruses by Declude Virus
|(http://www.declude.com)]
|
| ---
| This E-mail came from the Declude.JunkMail mailing list.  To 
| unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
| unsubscribe Declude.JunkMail.  The archives can be found at 
| http://www.mail-archive.com.
|
| .com.
|
|
|---
|[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude

RE: [Declude.JunkMail] Subject Starts with

2003-12-02 Thread John Tolmachoff \(Lists\)
ROLLING EYES

Of course, I have to take blame for this since I started the thread. NOT!

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
 Sent: Tuesday, December 02, 2003 12:12 PM
 To: '[EMAIL PROTECTED]'
 Subject: RE: [Declude.JunkMail] Subject Starts with
 
 newbieOooh! Scott, how about you *just* implement in the next interim
 full
 regexp text processing like product X along with MIME decoding like
 product
 Y, MIME error handling like product Z, with a whole new filtering grammar
 that lets us specify the layer of decoding at which the text filter line
 is
 run?/newbie
 
 Andrew ;)
 
 -Original Message-
 From: Pete McNeil [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, December 02, 2003 6:50 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Subject Starts with
 
 
 I recommend a simple scheme of simple characters and escape sequences.
 Borrowing from our Message Sniffer rule coding, how about _ as a space,
 and if you really need the _ character itself then you use \_. Then you
 also have to use \\ when you want the \, but that's a small price to pay
 and it's easy to code.
 
 Just a thought.
 _M
 
 |-Original Message-
 |From: [EMAIL PROTECTED]
 |[mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
 |Sent: Monday, December 01, 2003 5:54 PM
 |To: [EMAIL PROTECTED]
 |Subject: RE: [Declude.JunkMail] Subject Starts with
 |
 |
 |[Bill] [stranger] [things] [have] [happened] [in] [the] [past].
 |
 |[space] [may] [not] [be] [used] [but] [starting] [reserve]
 |[words] [can] [start] [a] [precedent] [that] [could] [make]
 |[filtering] [and] [debugging] [a] [nightmare].
 |
 |[Regards,] [:)]
 |[Kami]
 |
 |
 |-Original Message-
 |From: [EMAIL PROTECTED]
 |[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
 |Sent: Monday, December 01, 2003 5:32 PM
 |To: [EMAIL PROTECTED]
 |Subject: Re: [Declude.JunkMail] Subject Starts with
 |
 |It's not really a reserved word since the suggestion was
 |space enclosed in square brackets - how often have you seen
 |that used in a sentence:  wow, I really [space] out sometimes...  ;-)
 |
 |Bill
 |- Original Message -
 |From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 |To: [EMAIL PROTECTED]
 |Sent: Monday, December 01, 2003 1:27 PM
 |Subject: RE: [Declude.JunkMail] Subject Starts with
 |
 |
 | I have to agree with Kami. I would rather not define reserved words.
 |
 | John Tolmachoff
 | Engineer/Consultant/Owner
 | eServices For You
 |
 |
 |  -Original Message-
 |  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 |  [EMAIL PROTECTED] On Behalf Of Kami Razvan
 |  Sent: Monday, December 01, 2003 12:36 PM
 |  To: [EMAIL PROTECTED]
 |  Subject: RE: [Declude.JunkMail] Subject Starts with
 | 
 |  Matt..
 | 
 |  This is scary .. Now you are suggesting we start defining reserve
 |words..
 | 
 |  This way, if it starts a trend, we can not filter on [space]
 |  anymore..
 | 
 |  Just a thought.
 | 
 |  Kami
 | 
 | 
 |  -Original Message-
 |  From: [EMAIL PROTECTED]
 |  [mailto:[EMAIL PROTECTED] On Behalf Of Matthew
 |  Bramble
 |  Sent: Monday, December 01, 2003 3:23 PM
 |  To: [EMAIL PROTECTED]
 |  Subject: Re: [Declude.JunkMail] Subject Starts with
 | 
 |  Scott,
 | 
 |  Instead of adding it a command, how about you just create a
 |  substitution string for space, i.e. [space].  This way it could be
 |  used in this fashion, as well as before some words (as a delimiter
 |  in the sense that Bill earlier
 |  suggested).
 | 
 |  SUBJECT  0  BEGINSWITH  [space]
 |  BODY  0  CONTAINS  [space]ass
 | 
 |  Matt
 | 
 | 
 | 
 |  R. Scott Perry wrote:
 | 
 |  
 |   Scott, feature request. (Sigh, another one.)
 |  
 |   Can you add something like this:
 |  
 |   SUBJECT 0 STARTSWITHSPACE
 |  
 |   I am seeing a good amount of spam where the subject line starts
 |   with a space and then some character and then the subject.
 |  
 |  
 |   Ah, good idea -- I'll see if we can add that.
 |  
 |  -Scott
 |  
 | 
 |  ---
 |  [This E-mail was scanned for viruses by Declude Virus
 |  (http://www.declude.com)]
 | 
 |  ---
 |  This E-mail came from the Declude.JunkMail mailing list.  To
 |unsubscribe,
 |  just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 |  Declude.JunkMail.  The archives can be found at
 |  http://www.mail-archive.com.
 | 
 |  ---
 |  [This E-mail was scanned for viruses by Declude Virus
 |  (http://www.declude.com)]
 | 
 |  ---
 |  This E-mail came from the Declude.JunkMail mailing list.  To
 |  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 |  unsubscribe Declude.JunkMail.  The archives can be found at
 |  http://www.mail-archive.com.
 |
 | ---
 | [This E-mail was scanned for viruses by Declude Virus
 |(http://www.declude.com)]
 |
 | ---
 | This E-mail came from the Declude.JunkMail mailing list

Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread R. Scott Perry

Scott, feature request. (Sigh, another one.)

Can you add something like this:

SUBJECT 0 STARTSWITHSPACE

I am seeing a good amount of spam where the subject line starts with a space
and then some character and then the subject.
Ah, good idea -- I'll see if we can add that.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Matthew Bramble
Scott,

Instead of adding it a command, how about you just create a substitution 
string for space, i.e. [space].  This way it could be used in this 
fashion, as well as before some words (as a delimiter in the sense that 
Bill earlier suggested).

SUBJECT  0  BEGINSWITH  [space]
BODY  0  CONTAINS  [space]ass
Matt



R. Scott Perry wrote:


Scott, feature request. (Sigh, another one.)

Can you add something like this:

SUBJECT 0 STARTSWITHSPACE

I am seeing a good amount of spam where the subject line starts with 
a space
and then some character and then the subject.


Ah, good idea -- I'll see if we can add that.

   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Matthew Bramble

This way, if it starts a trend, we can not filter on [space] anymore..
 

Yes, but right now we can't filter on a space :)  Scott might also get a 
little fancy and convert the special character combinations from MIME 
like =3D to ASCII equivalents before processing the filters.  He's 
already doing some of that by stripping out the comment blocks.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Bill Landry
It's not really a reserved word since the suggestion was space enclosed in
square brackets - how often have you seen that used in a sentence:  wow, I
really [space] out sometimes...  ;-)

Bill
- Original Message - 
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 1:27 PM
Subject: RE: [Declude.JunkMail] Subject Starts with


 I have to agree with Kami. I would rather not define reserved words.

 John Tolmachoff
 Engineer/Consultant/Owner
 eServices For You


  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Kami Razvan
  Sent: Monday, December 01, 2003 12:36 PM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Subject Starts with
 
  Matt..
 
  This is scary .. Now you are suggesting we start defining reserve
words..
 
  This way, if it starts a trend, we can not filter on [space] anymore..
 
  Just a thought.
 
  Kami
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
  Sent: Monday, December 01, 2003 3:23 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Subject Starts with
 
  Scott,
 
  Instead of adding it a command, how about you just create a substitution
  string for space, i.e. [space].  This way it could be used in this
  fashion,
  as well as before some words (as a delimiter in the sense that Bill
  earlier
  suggested).
 
  SUBJECT  0  BEGINSWITH  [space]
  BODY  0  CONTAINS  [space]ass
 
  Matt
 
 
 
  R. Scott Perry wrote:
 
  
   Scott, feature request. (Sigh, another one.)
  
   Can you add something like this:
  
   SUBJECT 0 STARTSWITHSPACE
  
   I am seeing a good amount of spam where the subject line starts with
   a space and then some character and then the subject.
  
  
   Ah, good idea -- I'll see if we can add that.
  
  -Scott
  
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe,
  just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
  Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 .com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread John Tolmachoff \(Lists\)
That's just it, I am seeing the use of [] in spam subject lines.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Monday, December 01, 2003 2:32 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Subject Starts with
 
 It's not really a reserved word since the suggestion was space enclosed
 in
 square brackets - how often have you seen that used in a sentence:  wow, I
 really [space] out sometimes...  ;-)
 
 Bill
 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, December 01, 2003 1:27 PM
 Subject: RE: [Declude.JunkMail] Subject Starts with
 
 
  I have to agree with Kami. I would rather not define reserved words.
 
  John Tolmachoff
  Engineer/Consultant/Owner
  eServices For You
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
   [EMAIL PROTECTED] On Behalf Of Kami Razvan
   Sent: Monday, December 01, 2003 12:36 PM
   To: [EMAIL PROTECTED]
   Subject: RE: [Declude.JunkMail] Subject Starts with
  
   Matt..
  
   This is scary .. Now you are suggesting we start defining reserve
 words..
  
   This way, if it starts a trend, we can not filter on [space] anymore..
  
   Just a thought.
  
   Kami
  
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Matthew
 Bramble
   Sent: Monday, December 01, 2003 3:23 PM
   To: [EMAIL PROTECTED]
   Subject: Re: [Declude.JunkMail] Subject Starts with
  
   Scott,
  
   Instead of adding it a command, how about you just create a
 substitution
   string for space, i.e. [space].  This way it could be used in this
   fashion,
   as well as before some words (as a delimiter in the sense that Bill
   earlier
   suggested).
  
   SUBJECT  0  BEGINSWITH  [space]
   BODY  0  CONTAINS  [space]ass
  
   Matt
  
  
  
   R. Scott Perry wrote:
  
   
Scott, feature request. (Sigh, another one.)
   
Can you add something like this:
   
SUBJECT 0 STARTSWITHSPACE
   
I am seeing a good amount of spam where the subject line starts
 with
a space and then some character and then the subject.
   
   
Ah, good idea -- I'll see if we can add that.
   
   -Scott
   
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe,
   just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
   Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  .com.
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Kami Razvan
[Bill] [stranger] [things] [have] [happened] [in] [the] [past].

[space] [may] [not] [be] [used] [but] [starting] [reserve] [words] [can]
[start] [a] [precedent] [that] [could] [make] [filtering] [and] [debugging]
[a] [nightmare].

[Regards,] [:)]
[Kami]


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Monday, December 01, 2003 5:32 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Subject Starts with

It's not really a reserved word since the suggestion was space enclosed in
square brackets - how often have you seen that used in a sentence:  wow, I
really [space] out sometimes...  ;-)

Bill
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 1:27 PM
Subject: RE: [Declude.JunkMail] Subject Starts with


 I have to agree with Kami. I would rather not define reserved words.

 John Tolmachoff
 Engineer/Consultant/Owner
 eServices For You


  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Kami Razvan
  Sent: Monday, December 01, 2003 12:36 PM
  To: [EMAIL PROTECTED]
  Subject: RE: [Declude.JunkMail] Subject Starts with
 
  Matt..
 
  This is scary .. Now you are suggesting we start defining reserve
words..
 
  This way, if it starts a trend, we can not filter on [space] anymore..
 
  Just a thought.
 
  Kami
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble
  Sent: Monday, December 01, 2003 3:23 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Subject Starts with
 
  Scott,
 
  Instead of adding it a command, how about you just create a substitution
  string for space, i.e. [space].  This way it could be used in this
  fashion,
  as well as before some words (as a delimiter in the sense that Bill
  earlier
  suggested).
 
  SUBJECT  0  BEGINSWITH  [space]
  BODY  0  CONTAINS  [space]ass
 
  Matt
 
 
 
  R. Scott Perry wrote:
 
  
   Scott, feature request. (Sigh, another one.)
  
   Can you add something like this:
  
   SUBJECT 0 STARTSWITHSPACE
  
   I am seeing a good amount of spam where the subject line starts with
   a space and then some character and then the subject.
  
  
   Ah, good idea -- I'll see if we can add that.
  
  -Scott
  
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe,
  just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
  Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 .com.


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Bill Landry
So how would that hurt anything if all it provides is a way to delimit a
test and tell Declude that this [space] is a space?

Bill
- Original Message - 
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 2:54 PM
Subject: RE: [Declude.JunkMail] Subject Starts with


That's just it, I am seeing the use of [] in spam subject lines.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Monday, December 01, 2003 2:32 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Subject Starts with

 It's not really a reserved word since the suggestion was space enclosed
 in
 square brackets - how often have you seen that used in a sentence:  wow, I
 really [space] out sometimes...  ;-)

 Bill
 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, December 01, 2003 1:27 PM
 Subject: RE: [Declude.JunkMail] Subject Starts with


  I have to agree with Kami. I would rather not define reserved words.
 
  John Tolmachoff
  Engineer/Consultant/Owner
  eServices For You
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
   [EMAIL PROTECTED] On Behalf Of Kami Razvan
   Sent: Monday, December 01, 2003 12:36 PM
   To: [EMAIL PROTECTED]
   Subject: RE: [Declude.JunkMail] Subject Starts with
  
   Matt..
  
   This is scary .. Now you are suggesting we start defining reserve
 words..
  
   This way, if it starts a trend, we can not filter on [space] anymore..
  
   Just a thought.
  
   Kami
  
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Matthew
 Bramble
   Sent: Monday, December 01, 2003 3:23 PM
   To: [EMAIL PROTECTED]
   Subject: Re: [Declude.JunkMail] Subject Starts with
  
   Scott,
  
   Instead of adding it a command, how about you just create a
 substitution
   string for space, i.e. [space].  This way it could be used in this
   fashion,
   as well as before some words (as a delimiter in the sense that Bill
   earlier
   suggested).
  
   SUBJECT  0  BEGINSWITH  [space]
   BODY  0  CONTAINS  [space]ass
  
   Matt
  
  
  
   R. Scott Perry wrote:
  
   
Scott, feature request. (Sigh, another one.)
   
Can you add something like this:
   
SUBJECT 0 STARTSWITHSPACE
   
I am seeing a good amount of spam where the subject line starts
 with
a space and then some character and then the subject.
   
   
Ah, good idea -- I'll see if we can add that.
   
   -Scott
   
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe,
   just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
   Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  .com.
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Bill Landry
Oh, yes, now it get it...  [eye rolling out of head onto floor]  ;-)

Bill
- Original Message - 
From: Kami Razvan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 2:53 PM
Subject: RE: [Declude.JunkMail] Subject Starts with


 [Bill] [stranger] [things] [have] [happened] [in] [the] [past].

 [space] [may] [not] [be] [used] [but] [starting] [reserve] [words] [can]
 [start] [a] [precedent] [that] [could] [make] [filtering] [and]
[debugging]
 [a] [nightmare].

 [Regards,] [:)]
 [Kami]


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Monday, December 01, 2003 5:32 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Subject Starts with

 It's not really a reserved word since the suggestion was space enclosed
in
 square brackets - how often have you seen that used in a sentence:  wow, I
 really [space] out sometimes...  ;-)

 Bill
 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, December 01, 2003 1:27 PM
 Subject: RE: [Declude.JunkMail] Subject Starts with


  I have to agree with Kami. I would rather not define reserved words.
 
  John Tolmachoff
  Engineer/Consultant/Owner
  eServices For You
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
   [EMAIL PROTECTED] On Behalf Of Kami Razvan
   Sent: Monday, December 01, 2003 12:36 PM
   To: [EMAIL PROTECTED]
   Subject: RE: [Declude.JunkMail] Subject Starts with
  
   Matt..
  
   This is scary .. Now you are suggesting we start defining reserve
 words..
  
   This way, if it starts a trend, we can not filter on [space] anymore..
  
   Just a thought.
  
   Kami
  
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Matthew
Bramble
   Sent: Monday, December 01, 2003 3:23 PM
   To: [EMAIL PROTECTED]
   Subject: Re: [Declude.JunkMail] Subject Starts with
  
   Scott,
  
   Instead of adding it a command, how about you just create a
substitution
   string for space, i.e. [space].  This way it could be used in this
   fashion,
   as well as before some words (as a delimiter in the sense that Bill
   earlier
   suggested).
  
   SUBJECT  0  BEGINSWITH  [space]
   BODY  0  CONTAINS  [space]ass
  
   Matt
  
  
  
   R. Scott Perry wrote:
  
   
Scott, feature request. (Sigh, another one.)
   
Can you add something like this:
   
SUBJECT 0 STARTSWITHSPACE
   
I am seeing a good amount of spam where the subject line starts
with
a space and then some character and then the subject.
   
   
Ah, good idea -- I'll see if we can add that.
   
   -Scott
   
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe,
   just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
   Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  .com.
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Subject Starts with

2003-12-01 Thread Bill Landry
Oh, and the other thing to remember is, this is not something that Declude
would be searching for anywhere in the message, this is only something that
is used to define a delimiter to Declude.  Just like the delimiter you can
define in SpamChk:

SpaceChar=#

Which allows you to define check-words like:

anal#=5
#ass=5
#cock#=3
#sex#=2

By using the # as a delimiter, SpamChk does trigger on any of these words
with the # in them, only the word with a space before or after the word as
defined the placement of the # sign in the SpamChk.ini file, which tell
SpamChk how to trigger a match.  This is the same type of delimiter
capability being requested for Declude.

Hope this helps to clarify...

Bill
- Original Message - 
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 01, 2003 2:54 PM
Subject: RE: [Declude.JunkMail] Subject Starts with


That's just it, I am seeing the use of [] in spam subject lines.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Bill Landry
 Sent: Monday, December 01, 2003 2:32 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.JunkMail] Subject Starts with

 It's not really a reserved word since the suggestion was space enclosed
 in
 square brackets - how often have you seen that used in a sentence:  wow, I
 really [space] out sometimes...  ;-)

 Bill
 - Original Message -
 From: John Tolmachoff (Lists) [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, December 01, 2003 1:27 PM
 Subject: RE: [Declude.JunkMail] Subject Starts with


  I have to agree with Kami. I would rather not define reserved words.
 
  John Tolmachoff
  Engineer/Consultant/Owner
  eServices For You
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
   [EMAIL PROTECTED] On Behalf Of Kami Razvan
   Sent: Monday, December 01, 2003 12:36 PM
   To: [EMAIL PROTECTED]
   Subject: RE: [Declude.JunkMail] Subject Starts with
  
   Matt..
  
   This is scary .. Now you are suggesting we start defining reserve
 words..
  
   This way, if it starts a trend, we can not filter on [space] anymore..
  
   Just a thought.
  
   Kami
  
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Matthew
 Bramble
   Sent: Monday, December 01, 2003 3:23 PM
   To: [EMAIL PROTECTED]
   Subject: Re: [Declude.JunkMail] Subject Starts with
  
   Scott,
  
   Instead of adding it a command, how about you just create a
 substitution
   string for space, i.e. [space].  This way it could be used in this
   fashion,
   as well as before some words (as a delimiter in the sense that Bill
   earlier
   suggested).
  
   SUBJECT  0  BEGINSWITH  [space]
   BODY  0  CONTAINS  [space]ass
  
   Matt
  
  
  
   R. Scott Perry wrote:
  
   
Scott, feature request. (Sigh, another one.)
   
Can you add something like this:
   
SUBJECT 0 STARTSWITHSPACE
   
I am seeing a good amount of spam where the subject line starts
 with
a space and then some character and then the subject.
   
   
Ah, good idea -- I'll see if we can add that.
   
   -Scott
   
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe,
   just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
   Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
 
  .com.
 

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

.com.

---
[This E-mail was scanned for viruses