SV: a lot of mail delivery failed mail slips trough the filter

[Meurlin Robert]

"If they are truly sent from <> (a.k.a. MAILER-DAEMON:-), the Watermark feature of a fairly recent MailScanner can help a bit, or perhaps milter-null.
If they're not really DSNs, only pretending... other measures are what you need."

I tried the watermark feature but it stil causes problems for a few users. This morning one had about 120 of these failure notice mail in here inbox. When I look at same person but some days before it is okay not many as this night. 

When I look in mailwatch a lot of these "failure notice spam" has passed through "SpamAssassin Autolearn"

I have seen this problem coming more and more the last couple of weeks.

Anyone got anymore tip how to stop them?

Rob. 
 

-----Ursprungligt meddelande-----
Från: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] För Glenn Steen
Skickat: den 7 april 2008 10:10
Till: MailScanner discussion
Ämne: Re: a lot of mail delivery failed mail slips trough the filter

On 07/04/2008, Meurlin Robert <Robert.Meurlin at se.fujitsu.com> wrote:
>
>
> Hello,
> i have seen recent week that a lot of spam that have these subject lines:
> failure notice
> Delivery Status Notification (Failure) Delivery failure WARNING. Mail 
> Delayed  Returned mail: see transcript for detail
>
>
> slipps trough the filter, is there any other way to stop them without
>
> header   FRIEND_GREETINGS7      Subject =~ /Delivery Status Notification
> (Failure)/i
> describe FRIEND_GREETINGS7      blabla
>
> score    FRIEND_GREETINGS7      100.0
>
>
> ?
If they are truly sent from <> (a.k.a. MAILER-DAEMON:-), the Watermark feature of a fairly recent MailScanner can help a bit, or perhaps milter-null.
If they're not really DSNs, only pretending... other measures are what you need.

Cheers
--
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!