a lot of mail delivery failed mail slips trough the filter

[Glenn Steen]

On 07/04/2008, Meurlin Robert <Robert.Meurlin at se.fujitsu.com> wrote:
>
>
> Hello,
> i have seen recent week that a lot of spam that have these subject lines:
> failure notice
> Delivery Status Notification (Failure)
> Delivery failure
> WARNING. Mail Delayed
>  Returned mail: see transcript for detail
>
>
> slipps trough the filter, is there any other way to stop them without
>
> header   FRIEND_GREETINGS7      Subject =~ /Delivery Status Notification
> (Failure)/i
> describe FRIEND_GREETINGS7      blabla
>
> score    FRIEND_GREETINGS7      100.0
>
>
> ?
If they are truly sent from <> (a.k.a. MAILER-DAEMON:-), the Watermark
feature of a fairly recent MailScanner can help a bit, or perhaps
milter-null.
If they're not really DSNs, only pretending... other measures are what you need.

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se