> > i was wondering if someone has a filter file which scans incoming
> > mail for X-Mailer headers and removes known spam and massmailer
> > messages.
>
> if $header_X-Mailer: contains "Advanced Mass Sender" or
> $header_X-Mailer: contains "Mail Bomber" or
> $header_X-Mailer: contains "NetMasters SMTP" or
> $header_X-Mailer: contains "Mail Sender" or
> $header_X-Mailer: contains "PersMail" or
> $header_X-Mailer: contains "GMail2 " or
> $header_X-Mailer: contains "Dynamic Opt-In Emailer" or
> $header_X-Mailer: contains "CyberCreek" or
> $header_X-Mailer: contains "Mailloop"
> then
> seen finish
> endif
I have used the following(lifted from Matthew Byng-Maddick):
# trap known spam massmailers
if $h_x-mailer matches "(diffondi|Prospect Mailer|Aureate Group Mail|\
Microsoft Outlook Express 4.72.1712.3|CyberCreek Avalanche|\
Super-Duper-FastMail|commercialmail|Mozilla 4.55|Sparc12|\
Dynamic Opt-In Emailer|Floodgate|Extractor|Aristotle|MassE-Mail|\
e-Merge|Inet_Mail_Out|MailKing|PLAUZIUM|DMailer|jfmailer|\
Opt-In Lightning|E-mail sender|Power CGI Bulk System|MultiMailer|\
Copia emailFacts|MailXSender|007 Direct Email Easy|eGroups Message
Poster)"
then
seen finish
endif
The Mozilla and Outlook Express rules are correct, they reference
versions that were never released, and bulkmailers have been known
to use those strings.
-F
