I use a filter like the below. I'm a business so I have a bit moreflexibility. Basically if the bounce has a reference to one of my servers in the body, I won't run the filter.
# Combo Test to punish those that come from a Postmaster and not bounces from us? SKIPIFWEIGHT 365 # valid bounces should have a reference to my server BODY END CONTAINS imail.farmprogress.com BODY END CONTAINS smtp.farmprogress.com BODY END CONTAINS 65.118.31.132 BODY END CONTAINS 65.118.31.136 BODY END CONTAINS 65.118.31.140 REVDNS END ENDSWITH .blackberry.com REVDNS END ENDSWITH .blackberry.net BODY END NOTCONTAINS Received: from TESTSFAILED END NOTCONTAINS MAILFROM-POSTMASTER TESTSFAILED 100 CONTAINS MAILFROM-POSTMASTER # reverse white test TESTSFAILED 15 CONTAINS MXRATE-WHITE-LAST # more pain for graphics TESTSFAILED 50 CONTAINS ATTACHMENT-GRAPHIC BODY 25 CONTAINS application/pdf # commons spammy things BODY 50 CONTAINS *SPAM* BODY 50 CONTAINS * SPAM * BODY 75 CONTAINS Subject: RE: Hot Stock BODY 75 CONTAINS Subject: Drugz Shop BODY 75 CONTAINS Subject: meds Shop BODY 75 CONTAINS Subject: RE: MedHelp BODY 75 CONTAINS Subject: Online Med BODY 100 CONTAINS VIAGARA BODY 100 CONTAINS VIAGRA BODY 25 CONTAINS Delivery to the following recipients failed BODY 25 CONTAINS Disallowed attachment type BODY 50 CONTAINS Found Virus BODY 25 CONTAINS No such user BODY 25 CONTAINS too many connections BODY 25 CONTAINS Recipient unknown BODY 25 CONTAINS Message content rejected BODY 25 CONTAINS contains a virus BODY 25 CONTAINS mailfolder is over the allowed quota BODY 25 CONTAINS Message could not be delivered to mailer BODY 25 CONTAINS mailbox exceeds allowed size BODY 25 CONTAINS mailbox quota exceeded BODY 25 CONTAINS mail adress you entered is invalid BODY 25 CONTAINS Spam Blocked BODY 25 CONTAINS announcement-only group BODY 50 CONTAINS VIRUSDELETED BODY 50 CONTAINS VIRUS DELETED BODY 25 CONTAINS User unknown BODY 25 CONTAINS unknown user # XMailers I don't use. So punish them BODY 100 CONTAINS X-Mailer: Microsoft Outlook Express 5 BODY 50 CONTAINS X-Mailer: Microsoft Outlook Express 6 BODY 100 CONTAINS X-Mailer: The Bat! BODY 100 CONTAINS X-Mailer: Lotus Notes BODY 100 CONTAINS X-Mailer: Internet Mail Service BODY 100 CONTAINS X-Mailer: Novell GroupWise -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, February 18, 2008 3:25 PM To: [email protected] Subject: [Declude.JunkMail] Filter for Bounce messages I am looking for a filter that will allow me to delete "bounce" type messages. We are getting on internal blacklists (Bellsouth, Comcast) from what I believe is an over abundance of bounce messages. I would like to filter these out on my server. If anyone can help, I would appreciate it. Thanks, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
