sangiro 26 #1 February 4, 2004 Heya all, Below are some pointers on how to set up a more Advanced Spam Filter for your Dropzone.com Mail account than the one discussed here. A quick description of how this works: All emails relayed though the Dropzone.com Mail server is checked and "marked" to indicate the probability of the message being Spam. In the message header (not visible in normal view) all messages are tagged with a line that looks like this: X-Spam-Level: **** The number of stars indicates the Spam probability. The more stars, the more likely it is Spam. The Basic Spam Filter is set to mark a message in the subject line as *****SPAM***** if it receives 5 or more stars in this line. This means if you use that filter you will catch all messages with 5 stars and above only. To set your filters to be more sensitive you can filter directly on the X-Spam-Level in the header. If for example you want to also filter those messages that receive as little as 2 stars then set your filters like this: From your email interface go to: Options -> Advanced Filters Click on "Add new" to create a new filter. Set up one of the two filters below: 1) Delete all messages marked as Spam before they are delivered. To do this, use the following settings for your Spam filter: If Any header contains X-Spam-Level: ** then: Delete it If you use this method, messages will be deleted from the server before they are delivered to you. You will never see them, they will not be sent to your Trash folder. 2) Route all messages marked as Spam to a "Junk" folder. To do this, use the following settings for your Spam filter. Create a folder called "Junk" (or any other creative name you come up with!) If Any header contains X-Spam-Level: ** then: Move to Folder: Junk If you use this method, then messages will be routed to your custom folder. You have to manually delete them from there. After you delete them here they will appear in your Trash folder. Remember to empty that from time to time. Make sure you only have one of these filters running. The choice is yours delete them before they ever get to you or sort them to a folder of your choice. Also, make sure to have at least one star in your filter setting. With no stars all your emails will be deleted! Also remember, the lower your star rating the higher the likelihood that it will catch and delete some legitimate emails as well. Most normal emails should have a zero star rating but it is probably safe to start with 2 stars as described above. This post is also available in the Announcements forum for future reference.Safe swoops Sangiro Quote Share this post Link to post Share on other sites
jumperconway 0 #2 February 4, 2004 HH, Just by using the basic Spam filter, all email traffic stopped. I guess that means everything I was getting was Hi Prob. Spam? Quote Share this post Link to post Share on other sites
sangiro 26 #3 February 4, 2004 Nope - that's not what you did. You had two rules (only one now as I deleted one.) The one rule was written : If: Any Contains: spam Delete it This basically says... If you can find the word "spam" in any header on the email then delete it. That would be all your emails as the anti-spam program makes an entry into the header of every email that actually uses the word "spam" multiple times. Copy my rule exactly as I wrote them... don't leave anything out and don't abbreviate the condition statements or text. Rememember there's a lot of header information you don't normally see. Using the "any" condition will check against the complete header. I included a copy of a header below. Check and you'll see how many times the word spam appears. So you have to check for something more specific. I als0 sent you a test email and it seems to work fine. QuoteReturn-Path: Delivered-To: dropzone.com-someone@dropzone.com Received: (qmail 4044 invoked from network); 4 Feb 2004 17:40:11 -0000 X-AntiVirus: Clean Received: from unknown (HELO mail61.jwqqq.com) (69.6.40.126) by 0 with SMTP; 4 Feb 2004 17:40:11 -0000 Received: from zfpvtnnsf.jwqqq.com (69.56.15.26) by mail61.jwqqq.com with SMTP; 04 Feb 2004 10:40:14 -0700 Message-ID: <20411397.1075916415592.JavaMail.javamailuser@localhost> From: CarLoanProvider Reply-To: CarLoanProvider To: "someone@dropzone.com" Subject: *****SPAM***** Get the car you want! It's Simple Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_29695_12538956.1075916415584" x-ep: nrxdxdhnzxbqrzrqhzxzxhror pxqzordrzpdqrnup rhhxhouubx List-Unsubscribe: X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 2.60-rc3 (1.202-2003-08-29-exp) on paladin.nmsrv.com X-Spam-Report: * 1.9 DATE_MISSING Missing Date: header * 0.8 TO_ADDRESS_EQ_REAL To: repeats address as real name * 0.3 HTML_WEB_BUGS BODY: Image tag intended to identify you * 2.1 BAYES_90 BODY: Bayesian spam probability is 90 to 99% * [score: 0.9733] * 0.1 HTML_MESSAGE BODY: HTML included in message * 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" * 1.0 HTML_IMAGE_ONLY_04 BODY: HTML: images with 200-400 bytes of words * 2.7 RATWARE_STORM_URI URI: Bulk email fingerprint (StormPost) found * 0.1 CLICK_BELOW Asks you to click below X-Spam-Status: Yes, hits=9.1 required=5.0 tests=BAYES_90,CLICK_BELOW,DATE_MISSING, HTML_IMAGE_ONLY_04,HTML_LINK_CLICK_HERE,HTML_MESSAGE,HTML_WEB_BUGS, RATWARE_STORM_URI,TO_ADDRESS_EQ_REAL autolearn=no version=2.60-rc3 X-Spam-Level: ********* The spam level on this is 9! Count the stars in the last line (that's what you have to test for) Above that is a reason why each star was awarded...Safe swoops Sangiro Quote Share this post Link to post Share on other sites
jumperconway 0 #4 February 4, 2004 Got it thanks HH. Quote Share this post Link to post Share on other sites
