Effective Spam Filtering Techniques With Eudora Email

 


OVERVIEW

STRATEGY

THE FILTERS
 1 Virus Attached?
 2 Duplicate Fm-To
 3 Whitelist (Passlist)  
 4 Friendly Domains
 5 Newsletters
 6 List Subscriptions
 7  Keywords
 8 Personality
 9 Bogus Address
10 Username in
   Subject 

11 Click Here
12 !!!!!!!!!!!!
13 Remote Images  
    or Database Links
  
14 Bcc From
    Unknown
 
15 Bad Word List #1
16 Bad Word List #2
17 Tracking Codes
    in Subject

18 Bad Word List #3
19 Bad Word List #4
20 Bad Word List #5
21 Too Many HTTP's
22 Adult Links

23 Bogus Hotmail,
    AOL and Yahoo

"REGEXP" INFO

MOST EFFECTIVE
    SEARCH TERMS

LINKS

FILTER VERBS

Other Interesting
Eudora Filters:

Numerical User
   Name

HTML Contents
Asian Characters
Blank Subject
Secret Keyword
   With Auto-Reply

 

EUDORA SPAM FILTER 04
Friendly Domains
 

This filter looks at the From: header to see if this email is from one of the listed domains. The email can be from anybody there, whether you know them or not. If so, it goes to the inbox without further adieu. Obviously you would substitute YOUR favorite domains in the text box in place of mine. Domains you might list here could include your employer, your internet service provider, places that you shop online, paypal.com, etc.  Basically any domain that you get email from and that you trust not to send you spam. In the example below I accept all email from my employer wsu.edu, or my domain service provider westhost.com, or the online retailer rei.com, and several other domains with which I have some kind of relationship.

 

Match: Incoming and Manual
Header From:
Verb: matches regexp (case insensitive)
Value: wsu\.edu|westhost(\.com|\.net)|rei\.com|photo\.net|rrca\.org|onecall\.com
Actions:   Skip Rest
 (stop filtering this message and go straight to the inbox)

NOTES*

When using the matches regexp (case insensitive) verb, the slant-bar period  "\." finds a period. The slant bar is required because the period character has a special meaning by itself - it's a "wildcard" substitute for any character. The slant-bar returns it  to its regular meaning, a literal period.

The vertical bar " | " between the domain names in the text box is the "OR" symbol. It divys up the text into "this" or "that" or "the other" (this|that|the other). Be careful to NOT put spaces between the bars and the words, unless you really want to include the spaces as part of your search pattern!

Westhost(\.com|\.net)  will find either westhost.com or westhost.net


I've had a few instances of spammers forging my ISP or employer domain names, and for some reason they will include an http: or www link in the From: header. The following filter accepts my ISP's domain name UNLESS the From: header contains an "http:" anywhere or  ".com" before the "@" symbol.