Hello Paul, SNF does not yet see things that are not there - only those things that are. We have been coding some rules for these empty, broken messages, but the trouble is that the systems we support often add headers of their own before SNF sees the message and it is difficult to predict what those headers are.
Upcoming features will solve this problem, but at the moment we have no solid solution. Declude folks posted a combination rule that seems to be working well for them. Here is an excerpt from that post: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski Sent: Monday, June 19, 2006 1:37 AM To: [email protected] Subject: RE: [Declude.JunkMail] Blank body & Subject Looks like the following filter is working well. Using the HOLD action to verify filter success/failure. Caught 32 in the last 5 minutes. Global.cfg FILTERMSC filter D:\SmarterMail\declude\msc.txt x 0 0 msc.txt HEADERS 30 NOTCONTAINS from: HEADERS 30 NOTCONTAINS subject: $default$.junkmail FILTERMSC HOLD D:\smartermail\spool\msc ____ We will continue to look for rules to compensate in the mean time. Thanks, _M Monday, June 19, 2006, 1:21:30 PM, you wrote: > I'm getting swamped with emails that have > No TO address, no SUBJECT, and no BODY > I'm using MxGuard and don't see a way to block these. > Does sniffer return a code if there's no body? No subject AND no body? > That would be handy, if it did. > Paul Fuhrmeister > [EMAIL PROTECTED] ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
