Scrubbit Version 1
SPAM Filtering for your mailbox

FILTERING RULES

As each message arrives, it is subjected to filtering rules in the following order:

  • If the message is perceived to contain a virus, it is automatically discarded. Viruses are messages with attachments of the form: .exe, .pif, .lnk, .scr, .cmd, and .bat. Such messages can not be sent to a mailbox that is Scrubbit-protected.
  • If a message is listed in your "blocks" list, it is automatically discarded. This list can consist of specific email addresses, specific domains, or "wildcards" - such as all domains ending in a certain pattern. For example, it's possible to automatically discard all messages from China (i.e., those with domains ending in .cn).
  • Messages longer than a certain length can be discarded, thereby avoiding the problem of clogging your mailbox. (Note that the term "discarded" here means that the message is placed in a holding area, and is only really thrown away after a period of several days. See notes below on what happens to discarded messages.)
  • If a message is listed in your "friends" list, it is automatically accepted (provided none of the above rules have already caused it to be discarded.). Like the block list, friends can consist of specific email addresses, specific domains (e.g., @syv.com), or "wildcard" domains (@*.ru means any domain from Russia, for example.)
If a message has passed the scrutiny of the virus, block-list, and maximum message size tests, yet is not listed as from a "friend", it falls in the gray area - and a set of rules are applied to determine if the message "looks like" SPAM. If it does, it is discarded. The following points further describe how a message is tagged as "SPAM".
  • If selected in your configuration, Scrubbit checks to see if the "To:" address of a message is one of your valid email addresses. Up to four email addresses may be specified as specific to your mailbox. (Note: it is possible for users to have "aliases", thereby allowing up to four actual email addresses to be associated with your email address. Many "spammers" blast out emails without including each email address in either the "To:" or the "Cc:" field of the message, thereby causing the message to be discarded. Note that there are cases, such as with distribution lists, where you might actually want to receive messages in this case, and it is recommended that you include senders to such distribution lists be included in your "Friends" list.
  • Some spammers don't put a valid "From:" address in their messages, which should actually be contained in two different places in the header of each message. If this isn't the case, the message is discarded.
  • A "real" name (not a null field) requires that an actual name (not just the email address) of the sender must be present.
  • Messages can be sent through the Internet via SMTP servers that act as "relays", or postmasters. In cases where messages are transmitted world-wide, for example, a large number of "relay" servers may be used. It is recommended that this maximize at 2.
  • Each message is subjected to "content analysis" to see if certain "objectionable" words are present in either the Subject or the Body of the message. If so, the message is discarded. The "objectionable" words are obtained from a system-wide "bad words" list, which is maintained by the Internet Service. (Future versions of Scrubbit will allow private versions of the "bad words" list on a per-user basis.)
  • The "Max CAPS" trigger - one of the give-aways of SPAM messages is a large number of capitals in the subject field. For example, a spam might contain "REFINANCE NOW". This triggers the discard of a message if there are more than the specified number of capital letters in the subject field.
  • The "Max Spaces" trigger - often there are special tags on the right-hand side of the subject field, separated by 20 or more spaces. This is a give-away that the message is being broadcast to a mass mailing list, so the message is discarded.
  • The "Max Digits" trigger - Since spammers often open and close email accounts frequently, they include digits in their email addresses - and this is a give-away that it's a temporary account. For example, advert123@aol.com might be a temporary account. You can set the maximum number of digits tolerable in an email address before the Scrubbit filter decides to discard it.

To set your configuration options, login to the Scrubbit administration menu and click on the appropriate entry, then click Update to save the settings.