TWClark's e-mail server inserts X-Headers into the message header of suspected
SPAM messages. This makes it possible to move suspected SPAM e-mail to a SPAM folder
leaving good e-mail in your Inbox.
You should check your SPAM folder for good e-mail before deleting the SPAM folder's
contents. Some servers like Yahoo & HotMail will not verify the sender and you will
get a "X-IMAIL-SPAM-VALFROM:" or "X-IMAIL-SPAM-INVALIDFROM:" header.
To see a message's header in Outlook right click on the "From" name then click "Options".
Please contact us for assistance in setting up your filers.
This is a good catchall filter for Outlook. It puts all suspected
SPAM into a SPAM folder.
Note: Outlook Express can't do this.
To create the rule in Outlook:
Create a SPAM folder
on the menu bar click "View" > "Folder List"
right click "Personal Folders" > "New Folder"
name the folder "SPAM"
Create the rule
on the menu bar click "Tools" > "Rules Wizard"
click "New"
click "Next"
select "with specific words in the message header"
click "specific words" in the lower window
type "X-IMAIL-SPAM"
click "OK"
click "Next"
select "move it to the specified folder"
scroll down and select "stop processing more rules"
click "specified" in the lower window
highlight "SPAM" in the folder list
click "OK"
click "Next"
click "Finish"
highlight the "X-IMAIL-SPAM" rule and move it to the top
click "OK"
This is the completed rule:
Apply this rule after the message arrives
with X-IMAIL-SPAM in the message header
move it to the SPAM folder
and stop processing more rules
X-Header Explanation
X-IMAIL-SPAM-ADDRBL: (name_of_service, message_ID, IP address/reason) The message matched an ADDR black list.
X-IMAIL-SPAM-DNSBL: (name_of_service, message_ID, IP address/reason) The message matched a DNS black list.
X-IMAIL-SPAM-HELOBL: (name_of_service, message_ID, IP address/reason) The message matched a HELO/EHLO black list.
X-IMAIL-SPAM-HELODOMAIN: domain_name The message failed the HELO/EHLO domain validation.
X-IMAIL-SPAM-INVALIDFROM: from_address The message contained an invalid “FROM” address.
X-IMAIL-SPAM-IP4R: name_of_service The message matched an IP4R(PTR) black list.
X-IMAIL-SPAM-STATISTIC: x% The message has been identified as spam by the statistical filter. X is the probability that an e-mail is spam.
X-IMAIL-SPAM-REVDNS: ip_address The message failed a DNS lookup based on the IP address.
X-IMAIL-SPAM-RHSBL: (name_of_service, message_ ID, IP address/reason) The message matched a RHS black list.
X-IMAIL-SPAM-PHRASE: %s A phrase in the message matched the phrase list. (%s) represents the matched phrase.
X-IMAIL-SPAM-VALFROM: (messageID) The message failed the “MAIL FROM” address validation.
X-IMAIL-SPAM-VALREVDNS: (message ID) The message failed the reverse DNS lookup validation.
X-IMAIL-SPAM-VALHELO: The message failed the HELO/EHLO domain validation.
X-IMAIL-SPAM-FEATURES:(<found features>) The message contained the specified HTML tags.
X-IMAIL-SPAM-URL-DBL:(<domain>) The message contained HREF or IMG SRC tags with links to a domain name listed in the URL Domain Black List.
Production Filter
This example consists of six rules and does the following:
It puts messages into specific folders and keeps a copy in a folder called "Received Items".
1. Some people have a secret code "#/?#" they put into the subject that insures their mail is received.
2. It identifies known false positives and puts them into the Inbox.
3. It accepts email from any person in the Address Book.
4. It puts SPAM into the SPAM folder.
5. It deletes anything that made it through the SPAM filter and is not wanted.
6. It keeps a copy of all mail in the "Received Items" folder.
Rule 1 (Secret subject i.g. "#/?#")
Apply this rule after the message arrives
with specific words in the subject
move it to the Inbox folder
and move a copy to the Received Items folder
and stop processing more rules
Rule 2 (Keep specific senders or known false positives)
Apply this rule after the message arrives
with specific words in the sender's address
move it to the Inbox folder
and move a copy to the Received Items folder
and stop processing more rules
Rule 3 (White List)
Apply this rule after the message arrives
from people or distribution list
move it to the Inbox folder
and move a copy to the Received Items folder
and stop processing more rules
Rule 4 (Trash all SPAM)
Apply this rule after the message arrives
with X-IMAIL-SPAM in the message header
move it to the SPAM folder
and stop processing more rules
Rule 5 (Black List)
Apply this rule after the message arrives
with specific words in the sender's address
delete it
and stop processing more rules
Anything that makes it here automatically goes to the Inbox.
Rule 6 (Save a copy of all received mail)
Apply this rule after the message arrives
and move a copy to the Received Items folder
TWClark's e-mail server inserts X-Headers into the message header of suspected
SPAM messages. This makes it possible to move suspected SPAM e-mail to a SPAM folder
leaving good e-mail in your Inbox.
