Re: Old Date SPAM

----- Original Message -----
>At 7:17 AM -0500 5/9/07, Lee McMullen wrote:
>>I have recently began getting SPAM that displays
with a date of 
>>12/31/1969 06:00 PM
>>
>>The Date field in the header is
>>Date: Wed, 36 Aug 2007 10:16:41 +0900
>>
>>Has anyone developed a way to filter messages based
on dates?

You can use mfilter to search the headers and check to see
if the date is
in a resonable range and delete or pass accordingly.

See this webpage at netwin's site:

http://www.netwinsite.com/surgemail/help/mfilter.htm

=================================
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.
ca/blogs/gagel

------------------------------------------------------------
-------
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
Anti-spam information for CNC can be found at http://avas.cnc.bc.ca
------------------------------------------------------------
-------

surgemail-listnetwinsite.com wrote:
> ----- Original Message -----
>> At 7:17 AM -0500 5/9/07, Lee McMullen wrote:
>>> I have recently began getting SPAM that
displays with a date of 
>>> 12/31/1969 06:00 PM
>>>
>>> The Date field in the header is
>>> Date: Wed, 36 Aug 2007 10:16:41 +0900
>>>
>>> Has anyone developed a way to filter messages
based on dates?
> 
> You can use mfilter to search the headers and check to
see if the date is
> in a resonable range and delete or pass accordingly.
> 
> See this webpage at netwin's site:
> 
http://www.netwinsite.com/surgemail/help/mfilter.htm

Ahh,  there is a function
	date_offset("date")
which returns the offset in hours between 'now' and the
header specified.

But, if you use this, please allow for a fairly large
descrepency, e.g. 
a message can take days to deliver, and due to timezone mess
ups could 
be up to a day in the future so if you try and control it
too finely you 
will bounce real emails.

I'm not sure there is much to be gained from such a rule
really, but by 
all means have a go with it.

I'm not sure what it will do with an invalid date as below,
it may well 
just treat that as 5 september due to the date normalizing
functions 
which try and cope with such mistakes.



> 
> =================================
> Kevin W. Gagel
> Network Administrator
> Information Technology Services
> (250) 562-2131 local 448
> My Blog:
> http://mail.cnc.bc.
ca/blogs/gagel
> 
>
------------------------------------------------------------
-------
> The College of New Caledonia, Visit us at http://www.cnc.bc.ca
> Virus scanning is done on all incoming and outgoing
email.
> Anti-spam information for CNC can be found at http://avas.cnc.bc.ca
>
------------------------------------------------------------
-------
> 


-- 
When replying please quote original message to save time and
always let
us know what OS and version of SurgeMail you are using.

************************************************************
****************
If you wish to communicate with other users and talk about
SurgeMail and
also get news about updates etc then join the SurgeMail
List.
Send an email to surgemail-list-requestnetwinsite.com with only 
"subscribe" in the message body

FAQ - http
://www.netwinsite.com/surgemail/help/faq.htm
************************************************************
****************