Creating a rule to filter messages listed in a black list

Suppose you want to accept all messages whose IP addresses are listed in the FIVETEN black list because they are dialup addresses. You can filter the e-mail based on the X-Header that is inserted into the message and the IP/reason code that is returned from the black list. In the following example, 127.0.0.3 is the IP/reason code for dial up connections used by the FIVETEN black list. For more information on IP/reason codes, see How Black Lists Work.

Example of creating a rule to accept black lists for specific reasons:

1. Make sure that all of the antispam features are setup with the Insert X- Header action to be taken when e-mail is determined to be spam.
2. Set up a delivery rule (Inbound Rule) at either the host or user level that will search for all messages that contain the following X-Header:

   X-IMAIL-SPAM-DNSBL: (FIVETEN, +\d, 127.0.0.3)

The rule looks as follows in the Rules dialog box:

Header Contains X-IMAIL-SPAM-DNSBL:(FIVETEN, +\d,127.0.0.3)

For more information, see Setting Inbound Rules.

Choose one of the following rule actions: Forward, Move to Mailbox, or Copy. For example, select Move to Mailbox and in the Address text box enter "Spam".

This rule searches for all messages whose IP addresses are in the FIVETEN black list because they are dialups and sends them to a mailbox called "Spam".

The example rule looks as follows in the rules.ima file: H~ X- IMAIL-SPAM-DNSBL:(FIVETEN):Spam

Tip: Initially, you may want to set up a mailbox specifically for spam, then you can then evaluate the messages that are trapped to ensure that no legitimate mail gets caught by mistake.