On 03/12/2012 05:45 PM, Paul Russell wrote:
On 3/10/2012 16:43, Ned Slider wrote:
This one is easy enough - if the latter is the only valid url that
should ever appear in an email, create a meta rule that looks for a
url containing bway.net (or even just bway or webmail or login etc),
but isn't https://webmail.bway.net/.
Create meta rules for the common words you have identified. Link these
with a rule such as __HAS_ANY_URI or some of your webmail based URI
rules above.
>
What other rules commonly hit - are they sent from freemail accounts?
Do they hit any DNSBL's?
It's not that simple. If it were, the problem would not have been
ongoing for at least 4 years.
If I could get enough samples together, I'd be willing to run an auto
rule creation routine and make them available somewhere.
If anybody can contribute please contact me off list
Axb
