Thanks for the tip, but unfortunately I am not using the Pro version of
Declude so I cannot create my own filters. Are others being slammed with
stock spam recently? Declude is blocking several hundred of them a day, but
many are still slipping through without failing any or very few tests. Is it
possible to block with the country chain? I noticed that they are coming
from out of the country.  How is everyone dealing with these?   

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, November 06, 2006 11:27 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] Spam not being caught

This filter will work for targeting CMDSPACE with a gif attachment.
You might want to


SKIPIFWEIGHT 315
STOPATFIRSTHIT

BODY  END NOTCONTAINS Content-Type: image/gif TESTSFAILED END NOTCONTAINS
CMDSPACE

BODY  100 CONTAINS img src=3Dcid:
BODY  100 CONTAINS src=3D"cid:
BODY  100 CONTAINS src="cid:
BODY  100 CONTAINS src=3D"= cid:

----- Original Message -----
From: "Karl Hentschel" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Monday, November 06, 2006 12:58 PM
Subject: [Declude.JunkMail] Spam not being caught


> We have been getting quite a bit of SPAM, usually about stocks that is not
> being caught by Declude. I have the newest version of Declude, updated
> filter files from Imail, invURIBL,  trial version of Sniffer. These emails
> are typically only failing cmdspace and helobogus, not enough to get
> blocked. Has anyone had any success blocking these recent floods of 
> emails?
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
> 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to