[pmmail-list] Spam filtering
Paul Hodges
pmmail-list@blueprintsoftwareworks.com
Fri, 06 Sep 2002 16:29:59 +0100
--_=_=_=IMA.BOUNDARY.H20WDZ138764=_=_=_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
On Fri, 06 Sep 2002 10:13:31 -0500, Oberon wrote:
> Thanks, Paul. This is not the mail I had in mind,
Ah, I think I got that URL from somewhere else. Perhaps the attached
are the ones you really meant.
Paul Hodges
QBS Software Ltd
- pmmail-list - The PMMail Discussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com
with the first line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------
--_=_=_=IMA.BOUNDARY.H20WDZ138764=_=_=_
Content-Type: message/rfc822; name="[pmmail-list] Filter for SPAM"
Content-Transfer-Encoding: 8bit
Return-Path: <jimmym@blueprintsoftwareworks.com>
Received: from mail.bmtmicro.com (mail.bmtmicro.com [63.96.6.5]) by
putin.qbss.com (Weasel v1.37) for <paul@qbss.com>; 19 Mar 2002 13:45:27 -0000
Received: from smtp014.mail.yahoo.com by bmtmicro.com
with SMTP (MDaemon.PRO.v5.0.5.R)
for <paul@qbss.com>; Tue, 19 Mar 2002 08:42:35 -0500
Received: from brandontking (AUTH login) at ilm25-40-221.ec.rr.com (HELO blackbox2000) (brandontking@24.25.40.221)
by smtp.mail.vip.sc5.yahoo.com with SMTP; 19 Mar 2002 13:38:21 -0000
From: "Brandon King" <brandontking@yahoo.com>
To: <pmmail-list@blueprintsoftwareworks.com>
Date: Tue, 19 Mar 2002 08:38:16 -0500
Reply-To: pmmail-list@blueprintsoftwareworks.com
Priority: Normal
X-Mailer: PMMail 2000 Professional (2.20.2475) For Windows 2000 (5.0.2195;2)
In-Reply-To: <0cc095041101332FE7@mail7.sc.rr.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Subject: [pmmail-list] Filter for SPAM
Sender: jimmym@blueprintsoftwareworks.com
X-Return-Path: jimmym@blueprintsoftwareworks.com
PrecedencC: bulk
X-MDMailing-List: pmmail-list@blueprintsoftwareworks.com
X-MDSend-Notifications-To: jimmym@blueprintsoftwareworks.com
X-MDaemon-Deliver-To: paul@qbss.com
Message-ID: <MDAEMON-F200203190842.AA422918md50000949636@bmtmicro.com>
Looking for a good spam filter, look no further than the help file!
This one string stops 99% of spam I receive, you just may have to add a few exceptions, like this list. Use the following string:
!(header.to="$c.acctid$" | h.cc="$c.acctid$" | h.Resent-To="$c.acctid$" | h.Apparently-To="$c.acctid$") & !(h.to="pmmail-list")
Just add any other addresses in the parentheses with pmmail-list. Search the help file for Spam for more information on how that works.
On Tue, 19 Mar 2002 05:41:36 -0500 (EST), Randy Fowler wrote:
>Hi Alfred,
>
>On Tue, 19 Mar 2002 08:39:13 +0100, Alfred Haider wrote:
>
>>Hi Folks,
>>
>>Who can tell me how to build a filter for spam mail with pmmail?
>>Can someone send me an example, please?
>>Thanks for your help
>
>You'll need to set up a complex filter. Then try the following
>(from my message archive):
>
>
>---------------------------------------------------------------
>On Tue, 27 Nov 2001 18:14:56 +0100 (CET), Winfried Tilanus wrote:
>
>>
>>If you call this book "spam" it is:
>>
>>h.fromid="$ab.spam$"
>>
>>(look in the help at ICSL Help and ICSL Variables)
>>
>>But often the from adress is used only once or twice by spammers. I
>>don't like adding the address over and over again. So I do it the other
>>way around: If the mail doesn't have your e-mail adress in the to field
>>(most spam doesn't) and if it isn't from someone you know, then chances
>>are big it is spam. So my spam-filter looks like:
>>
>>!(h.fromid="$ab$" | h.to="winfried.t@inter.nl.net" |
>>h.cc="winfried.t@inter.nl.net")
>>
>>Only occasional some spam gets through (I might add some extra checks
>>on exclamation marks, html, etc soon)
>>
>>
>>Best wishes,
>>Winfried
>>
>
>I check for mail addressed to me and anything else ends up in my spam
>folder. Unfortunately that means that mail addressed to a mail list
>also gets caught since it doesn't have my email address. To get
>around this I filter for spam near the end of my filters so that
>everything else gets moved into other folders before reaching it.
>Only a very few actual spam messages get past and into the inbox.
>
>header.X-Distribution="Bulk" |
>header.X-Distribution="Mass"|
>header.Precedence="Bulk"|
>!(header.to="$c.acctid$"|
>h.cc="$c.acctid$"|
>h.Resent-To="$c.acctid$|
>h.Apparently-To="$c.acctid$)
>
>
>Walter
>---------------------------------------------------------------
>
>
>HTH,
>
>Randy
>
>- pmmail-list - The PMMail Dicussion List ---------------------------
>To POST to the list, send your message to:
>pmmail-list@blueprintsoftwareworks.com
>
>To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first
>line of the message body being...
>UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
>---------------------------------------------------------------------
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
- pmmail-list - The PMMail Dicussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------
--_=_=_=IMA.BOUNDARY.H20WDZ138764=_=_=_
Content-Type: message/rfc822; name="[pmmail-list]"
Content-Transfer-Encoding: 8bit
Return-Path: <jimmym@blueprintsoftwareworks.com>
Received: from mail.bmtmicro.com (mail.bmtmicro.com [63.96.6.5]) by
putin.qbss.com (Weasel v1.37) for <paul@qbss.com>; 19 Mar 2002 13:31:11 -0000
Received: from dolphin.nocdns.com by bmtmicro.com
with SMTP (MDaemon.PRO.v5.0.5.R)
for <paul@qbss.com>; Tue, 19 Mar 2002 08:30:07 -0500
Received: from 66-2-167-25-chi-02.cvx.algx.net ([66.2.167.25] helo=Arcturus)
by dolphin.nocdns.com with smtp (Exim 3.34 #1)
id 16nJke-0002aZ-00
for pmmail-list@blueprintsoftwareworks.com; Tue, 19 Mar 2002 08:34:09 -0500
From: "Maynard" <maynard.o@discourse.mentabolism.org>
To: <pmmail-list@blueprintsoftwareworks.com>
Date: Tue, 19 Mar 2002 07:27:47 -0600 (CST)
Reply-To: pmmail-list@blueprintsoftwareworks.com
Priority: Normal
X-Mailer: PMMail 2.20.2380 for OS/2 Warp 4.5
In-Reply-To: <20020319073926.1C6D937C01@mx04.nexgo.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Subject: [pmmail-list]
Message-Id: <E16nJke-0002aZ-00@dolphin.nocdns.com>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dolphin.nocdns.com
X-AntiAbuse: Original Domain - blueprintsoftwareworks.com
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [0 0]
X-AntiAbuse: Sender Address Domain - discourse.mentabolism.org
Sender: jimmym@blueprintsoftwareworks.com
X-Return-Path: jimmym@blueprintsoftwareworks.com
PrecedencC: bulk
X-MDMailing-List: pmmail-list@blueprintsoftwareworks.com
X-MDSend-Notifications-To: jimmym@blueprintsoftwareworks.com
X-MDaemon-Deliver-To: paul@qbss.com
On Tue, 19 Mar 2002 08:39:13 +0100, Alfred Haider wrote:
>Who can tell me how to build a filter for spam mail with pmmail?
>Can someone send me an example, please?
>Thanks for your help
You should look at http://www.xs4all.nl/~wtilanus/spam.html
If that's not what you want, here's my spam filter which catches 67% of
the above tool.
(! h.from = "@" | (!h.To=""))
|h.to="Undisclosed."
| h.from="netsales.net"
| h.from="promot"
|h.from="$ab.spammers$"
|h = "_["
|h = "alt1."
|h = "bulk.server.com"
|h = "192.41.19.90"
|h = "[206.186.43."
|h = "[209.167.79."
|h = "adnetwork"
|h = "ADV:"
|h = "dialsprint.net"
|h = "trim-slim"
|h = "cybermarket"
|h = ".ac.cn"
|h = "Stellar-X PostList"
|h = "edirectnetwork"
|h="digitalwork.com"
|h = "clickaction.net"
|h = "dwdata.com"
|h="[211"
|(h="marketing" &!h.subject="marketing")
|h="SMI-8.6/SMI-SVR4"
|h="[216.77.145."
|h="-0700 (EDT)"
|h="[205.211.138.173"
|h="[216.242.."
|h="..................."
|h="213.196.34.168"
|h="metability.com"
|h.from=".tw\""
|h=".tw ["
|h=".tw [61."
|h.X-EM-Registration="#01B0530810E603002D00"
|h.X-EM-Registration="#00F06206106618006920"
|h="[194.228.59."
|h="[61.168."
|h="[202.106."
|h="[63.148.233."
|h=".kr (["
|h.to="friend@public.com"
|h.Subject=" "
|h="65.170.214." | h="65.170.215."
|h.from="prestwood.com"
|h="([217.11.39."
|h=".tw " |h=".kr "|h=".cn "
|h.X-Mailer="diffondi"
|h="205.183.255."
|h="200.24.95."
|h=".monsterhut.com "
|h="213.24.13."
|h="210.83.196."
|h.X-Mailer="MMailer"
|h="211.169.249.129"
|h="hinet.net"
|h="216.31.147."
|h=".ch ["
- pmmail-list - The PMMail Dicussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------
--_=_=_=IMA.BOUNDARY.H20WDZ138764=_=_=_
Content-Type: message/rfc822; name="[pmmail-list] Filter for SPAM"
Content-Transfer-Encoding: 8bit
Return-Path: <jimmym@blueprintsoftwareworks.com>
Received: from mail.bmtmicro.com (mail.bmtmicro.com [63.96.6.5]) by
putin.qbss.com (Weasel v1.37) for <paul@qbss.com>; 19 Mar 2002 10:44:39 -0000
Received: from mail7.sc.rr.com by bmtmicro.com
with SMTP (MDaemon.PRO.v5.0.5.R)
for <paul@qbss.com>; Tue, 19 Mar 2002 05:44:14 -0500
Received: from localhost ([24.88.101.151]) by mail7.sc.rr.com with Microsoft SMTPSVC(5.5.1877.687.68);
Tue, 19 Mar 2002 05:41:50 -0500
From: "Randy Fowler" <rfowler@attglobal.net>
To: <pmmail-list@blueprintsoftwareworks.com>
Date: Tue, 19 Mar 2002 05:41:36 -0500 (EST)
Reply-To: pmmail-list@blueprintsoftwareworks.com
Priority: Normal
X-Mailer: PMMail 2.20.2380 for OS/2 Warp 4.0
In-Reply-To: <20020319073926.1C6D937C01@mx04.nexgo.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Subject: [pmmail-list] Filter for SPAM
Message-ID: <0cc095041101332FE7@mail7.sc.rr.com>
Sender: jimmym@blueprintsoftwareworks.com
X-Return-Path: jimmym@blueprintsoftwareworks.com
PrecedencC: bulk
X-MDMailing-List: pmmail-list@blueprintsoftwareworks.com
X-MDSend-Notifications-To: jimmym@blueprintsoftwareworks.com
X-MDaemon-Deliver-To: paul@qbss.com
Hi Alfred,
On Tue, 19 Mar 2002 08:39:13 +0100, Alfred Haider wrote:
>Hi Folks,
>
>Who can tell me how to build a filter for spam mail with pmmail?
>Can someone send me an example, please?
>Thanks for your help
You'll need to set up a complex filter. Then try the following
(from my message archive):
---------------------------------------------------------------
On Tue, 27 Nov 2001 18:14:56 +0100 (CET), Winfried Tilanus wrote:
>
>If you call this book "spam" it is:
>
>h.fromid="$ab.spam$"
>
>(look in the help at ICSL Help and ICSL Variables)
>
>But often the from adress is used only once or twice by spammers. I
>don't like adding the address over and over again. So I do it the other
>way around: If the mail doesn't have your e-mail adress in the to field
>(most spam doesn't) and if it isn't from someone you know, then chances
>are big it is spam. So my spam-filter looks like:
>
>!(h.fromid="$ab$" | h.to="winfried.t@inter.nl.net" |
>h.cc="winfried.t@inter.nl.net")
>
>Only occasional some spam gets through (I might add some extra checks
>on exclamation marks, html, etc soon)
>
>
>Best wishes,
>Winfried
>
I check for mail addressed to me and anything else ends up in my spam
folder. Unfortunately that means that mail addressed to a mail list
also gets caught since it doesn't have my email address. To get
around this I filter for spam near the end of my filters so that
everything else gets moved into other folders before reaching it.
Only a very few actual spam messages get past and into the inbox.
header.X-Distribution="Bulk" |
header.X-Distribution="Mass"|
header.Precedence="Bulk"|
!(header.to="$c.acctid$"|
h.cc="$c.acctid$"|
h.Resent-To="$c.acctid$|
h.Apparently-To="$c.acctid$)
Walter
---------------------------------------------------------------
HTH,
Randy
- pmmail-list - The PMMail Dicussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------
--_=_=_=IMA.BOUNDARY.H20WDZ138764=_=_=_--