On 3/10/2012 16:43, Ned Slider wrote:

This one is easy enough - if the latter is the only valid url that should ever appear in an email, create a meta rule that looks for a url containing bway.net (or even just bway or webmail or login etc), but isn't https://webmail.bway.net/.

Create meta rules for the common words you have identified. Link these with a rule such as __HAS_ANY_URI or some of your webmail based URI rules above.
>
What other rules commonly hit - are they sent from freemail accounts? Do they hit any DNSBL's?

It's not that simple. If it were, the problem would not have been ongoing for at least 4 years.

--
Paul Russell, Senior Systems Administrator
OIT Messaging Services Team
University of Notre Dame

Reply via email to