Pattern Based Message Filtering | 57 |
Message Header Parameters
Spammers will typically enter false information into these fields and, except for the Subject field, they are usually not useful in controlling spam. These fields may be useful in whitelisting certain users or legitimate source of email.
■<<Mail Header>> — This parameter allows for a match on any part of the message header.
■<<Recipient>> — This parameter matches the To: or CC: fields.
■CC:
■From:
■
■Received:
■
■Sender:
■Subject:
■To:
Message Body Parameters
■<<Raw Mail Body>> — This parameter allows for a match on any part of the encoded message body. This encoded content includes Base64, MIME, and HTML. Since messages are not decoded, a simple text match may not work. Use <<Mail Content>> for text matching on the decoded content.
■<<Mail Content>> — This parameter allows for a match on the visible decoded message body.
STA Token
STA tokens can also be selected for pattern based message filters. This allows you to match patterns for common spam words that could be hidden or disguised with fake or invisible HTML text comments that would not be caught by a normal pattern filter. For example, STA extracts the token "viagra" from the text "vi<spam>ag<spam>ra" and "v.i.a.g.r.a.".
