Effective Spam Filtering With Eudora

 


OVERVIEW

STRATEGY

REGEXP  INFO

THE FILTERS
 1 Virus Attached?
 2 Duplicate Fm-To
 3 Whitelist (Passlist)  
 4 Friendly Domains
 5 Newsletters
 6 List Subscriptions
 7  Keywords
 8 Personality
 9 Bogus Address
10 Username in
   Subject 

11 Click Here
12 !!!!!!!!!!!!
13 Remote Images  
    or Database Links
  
14 Bcc From
    Unknown
 
15 Bad Word List #1
16 Bad Word List #2
17 Tracking Codes
    in Subject

18 Bad Word List #3
19 Bad Word List #4
20 Bad Word List #5
21 Too Many HTTP's
22 Adult Links

23 Bogus Hotmail,
    AOL and Yahoo

 

MOST EFFECTIVE
    SEARCH TERMS

LINKS

FILTER VERBS

Other Interesting
Eudora Filters:

Numerical User
   Name

HTML Contents
Asian Characters
Blank Subject
Secret Keyword
   With Auto-Reply

 

EUDORA SPAM FILTER 23
Bogus Email "From" Hotmail, AOL or Yahoo


Catches:
Email with forged headers claiming to be from "Hotmail", "AOL" or "Yahoo"

This is actually a set of three different filters, each performing a similar function. Email claiming to be from Hotmail but not having the Hotmail-added header "X-Originating-IP" is most likely fake. Email from Hotmail, AOL or Yahoo that does not have "Hotmail", "AOL" or "Yahoo" in the Message-ID header, are most likely fake.

 

Filter Image Date 7/08/03

 

Match: Incoming and Manual
Header From:
Verb: contains
Value: HOTMAIL
conjunction   and
Header X-Originating-IP (you must type this header in, it's not a selection)
Verb: Doesn't appear
Value:  
Actions: Transfer To Spam.mbx (or to the trash)
   Make Label 3
  Skip Rest

This filter looks in the "From:" header - if it claims to be from a Hotmail account, it should have the Hotmail X-Originating-IP header added. Exceptions - email from Hotmail users but forwarded from a third party such as Hallmark e-greeting cards or  Ebay will not have the Hotmail X-Originating-IP header added. These users will not be a problem if they are included on your whitelist.

 

Filter Image Date 7/08/03

 

Match: Incoming and Manual
Header From:
Verb: contains
Value: AOL
conjunction   and
Header Message-ID (you must type this header in, it's not a selection)
Verb: Doesn't contain
Value: AOL.COM
Actions: Transfer To Spam.mbx (or to the trash)
   Make Label 3
  Skip Rest

This filter looks in the "From:" header - if it claims to be from an AOL account, it should have "AOL.COM" in the Message-ID header. Exceptions - email from AOL users but forwarded from a third party such as Hallmark e-greeting cards or  Ebay will not contain AOL.COM in the message-ID header. These users will not be a problem if they are included on your whitelist.

 

Filter Image Date 7/08/03

 

Match: Incoming and Manual
Header From:
Verb: contains
Value: YAHOO
conjunction   and
Header Message-ID  (you must type this header in, it's not a selection)
Verb: Doesn't contain
Value: YAHOO
Actions: Transfer To Spam.mbx (or to the trash)
   Make Label 3
  Skip Rest

This filter looks in the "From:" header - if it claims to be from a Yahoo account, it should have "YAHOO" in the Message-ID header. Exceptions - email from Yahooligans but forwarded from a third party such as Hallmark e-greeting cards or  Ebay will not contain "Yahoo" in the Message-ID header. These users will not be a problem if they are included on your whitelist.