[pmmail-list] Filter for SPAM

[Randy Fowler]

Hi Alfred,

On Tue, 19 Mar 2002 08:39:13 +0100, Alfred Haider wrote:

>Hi Folks,
>
>Who can tell me how to build a filter for spam mail with pmmail?
>Can someone send me an example, please?
>Thanks for your help

You'll need to set up a complex filter.  Then try the following
(from my message archive):


---------------------------------------------------------------
On Tue, 27 Nov 2001 18:14:56 +0100 (CET), Winfried Tilanus wrote:

>
>If you call this book "spam" it is:
>
>h.fromid="$ab.spam$"
>
>(look in the help at ICSL Help and ICSL Variables)
>
>But often the from adress is used only once or twice by spammers. I
>don't like adding the address over and over again. So I do it the other
>way around: If the mail doesn't have your e-mail adress in the to field
>(most spam doesn't) and if it isn't from someone you know, then chances
>are big it is spam. So my spam-filter looks like:
>
>!(h.fromid="$ab$" | h.to="winfried.t@inter.nl.net" |
>h.cc="winfried.t@inter.nl.net")
>
>Only occasional some spam gets through (I might add some extra checks
>on exclamation marks, html, etc soon)
>
>
>Best wishes,
>Winfried
>

I check for mail addressed to me and anything else ends up in my spam
folder.  Unfortunately that means that mail addressed to a mail list
also gets caught since it doesn't have my email address.  To get
around this I filter for spam near the end of my filters so that
everything else gets moved into other folders before reaching it. 
Only a very few actual spam messages get past and into the inbox.  

header.X-Distribution="Bulk" |
header.X-Distribution="Mass"|
header.Precedence="Bulk"|
!(header.to="$c.acctid$"|
h.cc="$c.acctid$"|
h.Resent-To="$c.acctid$|
h.Apparently-To="$c.acctid$)


Walter
---------------------------------------------------------------


HTH,

Randy

- pmmail-list - The PMMail Dicussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com

To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------