The default rules should be dealing with that.

What version of surgemail are you using. And have you applied the config checker settings?

(can you send me your surgemail.ini  send to surgemail-support@Netwinsite.com not the list!)

ChrisP.

I've been getting lots of spam lately. Each spurt will be 20 or more nearly identical emails. One thing in common is, it seems, they all have

Sender Lookup: someip - .fake_nodots

I tried to add a filter to catch these. In my default filters, I added CUSTOM, typed Sender Lookup and put in the fake_notots. It didn't seem to work. Is this something that's added in after the filtering? They're coming in fast and furious from different "senders". I'm getting 100 or so every few minutes. Any ideas?