To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam not being caught
This filter will work for targeting CMDSPACE with a gif attachment.
You might want to
SKIPIFWEIGHT 315
STOPATFIRSTHIT
BODY END NOTCONTAINS Content-Type: image/gif TESTSFAILED END NOTCONTAINS
CMDSPACE
BODY 100 CONTAINS img
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott
Fisher
Sent: Monday, November 06, 2006 11:27 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Spam not being caught
This filter will work for targeting CMDSPACE with a gif attachment.
You might want to
SKIPIFWEIGHT
ta-
X-IMAIL-SPAM-PHRASE IT'S BUD X-UIDL: 463095290
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerSent:
Thursday, November 09, 2006 11:31 AMTo:
declude.junkmail@declude.comSubject: X-IMail-SPAM-Phrase Re:
[Declude.JunkMail] Spam not being caught
Hi Karl,Post a sample w
L PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick
Hayer
Sent: Thursday, November 09, 2006 11:31 AM
To: declude.junkmail@declude.com
Subject: X-IMail-SPAM-Phrase Re: [Declude.JunkMail] Spam not
being caught
Hi Karl,
Post a sample with full headers so we can see what the scofflaw is
se
:51
PM
Subject: Re: [Declude.JunkMail] Spam not
being caught
So far - and I have been hammered as well is they all
contain 2 "$$" and end with @debora I have a regex that hits these -
[EMAIL PROTECTED]-NickKarl Hentschel wrote:
Here are a headers
effectively with any IP4r list.
-
Original Message -
From:
Nick Hayer
To:
declude.junkmail@declude.com
Sent:
Thursday, November 09, 2006 4:51 PM
Subject:
Re: [Declude.JunkMail] Spam not being caught
So far - and I have been hammered as well
Scott Fisher wrote:
I get over a 1000 spam a day from
this spammer.
If you don't have a pattern would you mind sending me off list a few of
the ones you do receive from different days? I do not recognize this
gut so I would like to see more of his product.
-Nick
This filter will work for targeting CMDSPACE with a gif attachment.
You might want to
SKIPIFWEIGHT 315
STOPATFIRSTHIT
BODY END NOTCONTAINS Content-Type: image/gif
TESTSFAILED END NOTCONTAINS CMDSPACE
BODY 100 CONTAINS img src=3Dcid:
BODY 100 CONTAINS src=3Dcid:
BODY 100 CONTAINS src=cid:
