Kami, How do you see me using a filter file "to add a small amount of points for the end of every SENDER that doesn't match the end of every REVDNS in the "edu" TLD."?
I don't know how to use a filter file to compare a string in one field to a string in another. If it can be done that would be great. Thanks, Dan Geiser [EMAIL PROTECTED] ----- Original Message ----- From: "Kami Razvan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 14, 2004 9:22 AM Subject: RE: [Declude.JunkMail] SPAMDOMAINS works as ENDSWITH or CONTAINS? > Dan.. > > Can you not use a filter file for this? > > Kami > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser > Sent: Friday, May 14, 2004 9:09 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] SPAMDOMAINS works as ENDSWITH or CONTAINS? > > Scott, > I know it's been awhile since you posted the answer to my original question > but I would _love_ to have a test which functions exactly the same as > "spamdomains" but instead of searching the reverse DNS in a CONTAINS type > manner it searched it an ENDSWITH type manner. > > That would allow me to create a file like the below (that would be used with > the ENDSWITH-type"spamdomains" test)... > > - > a.edu > b.edu > c.edu > d.edu > . > . > . > w.edu > x.edu > y.edu > z.edu > - > > which I would use to add a small amount of points for the end of every > SENDER that doesn't match the end of every REVDNS in the "edu" TLD. With > "edu" especially a large majority of the time it does match so points for > not matching would be great. > > And that's just one example of how that would be very useful to me. > .Just another request to give consideration for the future. > > Thanks, > Dan Geiser > [EMAIL PROTECTED] > > ----- Original Message ----- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, March 02, 2004 7:11 PM > Subject: Re: [Declude.JunkMail] SPAMDOMAINS works as ENDSWITH or CONTAINS? > > > > > > >If I have a SPAMDOMAINS type test in my GLOBAL.CFG... > > > > > >SD-TLD spamdomains D:\iMail\declude\JunkMail.SpamDomains.TLD.txt x 5 0 > > > > > >...and I have some entries in the corresponding flat text file like > below... > > > > > >.mil > > > > > >will SPAMDOMAINS search the reverse DNS entry in a CONTAINS type manner > or > > >an ENDSWITH type manner? > > > > It will work like CONTAINS, so: > > > > >For example would the host name ".milton-bradley.com" in the below... > > > > > >- > > >X-Note: Sent with HELO [mail] from Reverse DNS [mail.milton-bradley.com] > > >- > > > > > >get flagged as passing or failing the SPAMDOMAINS test? > > > > That one would get caught, if the reverse DNS entry did not contain ".mil" > > in it. So if the E-mail was from [EMAIL PROTECTED], and the > > reverse DNS entry was "mail.milton-bradley.com", the E-mail would not fail > > the test (but if the reverse DNS was "mail.someone_else.com", it would > fail > > the test). > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > > since 2000. > > Declude Virus: Catches known viruses and is the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > ----------------------------------------------------------------------- > > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > > http://www.nexustechgroup.com/mailscan > > > > > > ----------------------------------------------------------------------- > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > http://www.nexustechgroup.com/mailscan > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > ----------------------------------------------------------------------- > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > http://www.nexustechgroup.com/mailscan > > ----------------------------------------------------------------------- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
