I received a spam email, which was an HTML email with only one line. The
line is as follows:
img src=cid:85ae9b8e79a2548912c0c40ef7709a27
I have a body filter with the following:
BODY 2 BEGINSWITH img src=cid:
The filter didn't trip on the spam email. Any idea of
: [Declude.JunkMail] Help with filter
I received a spam email, which was an HTML email with only one line. The
line is as follows:
img src=cid:85ae9b8e79a2548912c0c40ef7709a27
I have a body filter with the following:
BODY 2 BEGINSWITH img src=cid:
The filter didn't trip
There is probably some html coding before that line.
- Original Message -
From: Dave Beckstrom [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, January 16, 2006 9:02 AM
Subject: [Declude.JunkMail] Help with filter
I received a spam email, which was an HTML email
Fisher
Sent: Monday, January 16, 2006 10:36 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Help with filter
There is probably some html coding before that line.
- Original Message -
From: Dave Beckstrom [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent
email being coded like that.
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Erik
Sent: Monday, January 16, 2006 9:10 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Help with filter
Hi Dave,
Look at this thread
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom
Sent: Monday, January 16, 2006 6:23 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Help with filter
Hi Erik,
Thanks for turning me on to that thread. There was some good
] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Erik
Sent: Monday, January 16, 2006 12:01 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Help with filter
Yes, that spam campaign keeps changing subjects.
Unfortunately, if you filter only on the CID tag; you will filter some
. ;-)
-Erik
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom
Sent: Monday, January 16, 2006 7:12 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Help with filter
Erik,
I thought that the beginswith meant that we
]
[mailto:[EMAIL PROTECTED] On Behalf Of Erik
Sent: Monday, January 16, 2006 10:33 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Help with filter
Yes, you are correct with the use of BEGINSWITH.
This campaign is and has been lately using html code before
the CID tag
I've finally gotten some time to me mess around with my recent JunkMail
installation and am trying to begin slowly and configure a simple filter
to delete some recurring spam I get for a legitimate source (long story)
I followed the manual and in my globals.cfg file I've setup:
BIGELOWSPAM
But I'm still getting messages through - and if I look at the headers I
can see they've failed the test:
X-Spam-Tests-Failed: BADHEADERS, HELOBOGUS, IPNOTINMX, REVDNS, ROUTING,
BIGELOWSPAM, WEIGHT10, WEIGHT20 [27]
That means that the test is set up properly, but a different action is
being used
$.junkmail ??
Jim
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 31, 2004 1:45 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Help with filter to delete mail
That means that the test is set up properly, but a different action is
being
That is indeed the case - I think it's reading the base
$default$.junkmail and it's never making it to my
\domainname\$default$.junkmail where I have it set to delete.
Is domainname the actual name of the domain name (if domainname is an
alias for mail.domainname, then the directory needs to be
: Wednesday, March 31, 2004 2:23 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Help with filter to delete mail
That is indeed the case - I think it's reading the base
$default$.junkmail and it's never making it to my
\domainname\$default$.junkmail where I have it set to delete
The full path is:
E:\imail\declude\mail.mydomainname.com\$default$.junkmail
Well, the question then becomes: is mail.mydomainname.com the actual name
of the domain, or a domain alias? If the actual name is
mydomainname.com, then directory should be
, 2004 3:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Help with filter to delete mail
Well, the question then becomes: is mail.mydomainname.com the actual
name
of the domain, or a domain alias? If the actual name is
mydomainname.com, then directory should be
E:\imail\declude
It is indeed mail.mydomainname.com, which is also how Imail is setup.
The next question, then, is Was the E-mail sent to an alias?. If so, the
domain used in the alias would be used for the per-domain configuration
settings.
Do I need to wrap the path in global.cfg with quotes??
BIGELOWSPAM
The email is going to:
[EMAIL PROTECTED] which is an alias for [EMAIL PROTECTED]
In that case, you need to use \IMail\Declude\mydomainname.com (for aliases,
IMail gives Declude the domain that the alias points to, rather than the
official name of the domain).
] Help with filter to delete mail
It is indeed mail.mydomainname.com, which is also how Imail is setup.
The next question, then, is Was the E-mail sent to an alias?. If so,
the
domain used in the alias would be used for the per-domain configuration
settings.
---
[This E-mail was scanned
the mail.mydomainname.com
Thanks,
Jim
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, March 31, 2004 4:03 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Help with filter to delete mail
The email is going
Sorry, don't mean to be dense here - I'm learning :)
So I need both:
Imail\declude\mail.mydomainname.com
Imail\declude\mydomainname.com
Or will Imail\declude\mydomainname.com cover both?
That all depends on how your E-mail is set up. If you just use
mydomainname.com or mail.mydomainname.com,
21 matches
Mail list logo