HELP - Junk Rules NOT WORKING!!!

  • Thread starter Thread starter M Skabialka
  • Start date Start date
M

M Skabialka

The only junk rules I have which seem to work are those that filter on the
recipients name, absolutely NONE of them work that use words in the subject
or message.

I am bombarded with more and more junk mail every day, it takes more and
more time away from my work.

Is there a secret to writing junk rules filtering for words? I know it
won't look at HTML messages but the subject isn't in HTML, or is it????

All help would be appreciated!

Thanks,
Mich
 
Here's a little of what I found in some of today's junk email based on what
you suggested....
Received: from 192.173.8.73 ([218.148.78.205]) - Kyonggi-do, Korea, South
Received: from 192.173.8.73 ([61.248.184.174]) - Pusan-gwangyoksi, Korea,
South
Received: from keromail.com ([205.251.248.204]) - Newfoundland and
Labrador, Canada
Received: from SERVER ([217.219.104.99]) - Fars, Iran
Received: from 192.173.8.73 ([61.171.18.184]) - Shanghai, China

(I used this site for the info:
http://www.geobytes.com/IpLocator.htm?GetLocation)

If only there were a pattern! None seem to come from the same place....

But, back to the original question; why doesn't filtering on words in the
subject line work?
Mich
 
M said:
Here's a little of what I found in some of today's junk email based on what
you suggested....
Received: from 192.173.8.73 ([218.148.78.205]) - Kyonggi-do, Korea, South
Received: from 192.173.8.73 ([61.248.184.174]) - Pusan-gwangyoksi, Korea,
South
Received: from keromail.com ([205.251.248.204]) - Newfoundland and
Labrador, Canada
Received: from SERVER ([217.219.104.99]) - Fars, Iran
Received: from 192.173.8.73 ([61.171.18.184]) - Shanghai, China

(I used this site for the info:
http://www.geobytes.com/IpLocator.htm?GetLocation)

If only there were a pattern! None seem to come from the same place....

But, back to the original question; why doesn't filtering on words in the
subject line work?
Mich



You probably want to begin filtering on the message header. I've received
a

lot of spam from "isp.webly.net" I now delete all messages that come from
that address.

I discovered this by keeping all of my spam for a short period of time and
then viewing the headers by right-clicking and selecting "options" on an
individual message. After you look at several messages you should see a
pattern.

I checked the lines before the from lines to get to the IP address and not
the "usually" spoofed return address. To get some information that is
harder

to fake. Hope this helps.

D. Bryant


the
Wouldn't it be nice if someone from Microsoft had a reply???? This sucks!!
 
tk said:
M Skabialka wrote:
<snip>

If is funny that you should mention using our IpLocator technology to
locate Spam, we had the same idea when we built Spamborders (see
http://m.geobytes.com/Spamborders.html) We have been using it since
late last year, and it does work. What we found however was that you
still need a way that people can contact you from outside of your
borders so to solve this problem we built "CaseKeys" (see
http://m.geobytes.com/CaseKeys.html). We are currently trying to get
Microsoft to incorporate these technologies into Outlook, but have not
been able to get out message through to the right person yet.
BTW, for those that use our IpLocator to resolve the source of email,
we also have a SpamLocator tool at
http://www.geobytes.com/spamlocator.htm It not only tells you were it
comes from, but how it got to you. (It shows the location of any post
offices that it could locate along the way.)
 
Back
Top