Hi, Kami,
I don't even know how to mentally parse the below code that you've listed.
Would this go inside a filter file?  What does each line signify?

For example, REVDNS END ENDSWITH .hotmail.com.  I've not seen that syntax
before.  Is END a valid value in that column?  What does it do?  When was
the END value introduced?  I am currently running v1.75 and I know there's
been a lot of stuff introduced since our Service Agreement expired.

Thanks for your feedback.

Dan

----- Original Message ----- 
From: "Kami Razvan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 14, 2004 9:40 AM
Subject: RE: [Declude.JunkMail] SPAMDOMAINS works as ENDSWITH or CONTAINS?


> Dan..
> May be I am not understanding the question.  But I basically have a couple
> of combination tests that are like the following:
>
> REVDNS END ENDSWITH .hotmail.com
> MAILFROM 3 ENDSWITH @hotmail.com
> HELO 5 ENDSWITH .hotmail.com
>
> So with this logic you can add weight if someone is using Hotmail as
return
> address but is not using hotmail to send mail.
>
> We have this for a lot of ISP's.
>
> Is this what you are trying to do?
>
> Regards,
> -Kami
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
> Sent: Friday, May 14, 2004 9:31 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] SPAMDOMAINS works as ENDSWITH or CONTAINS?
>
> Kami,
> How do you see me using a filter file "to add a small amount of points for
> the end of every SENDER that doesn't match the end of every REVDNS in the
> "edu" TLD."?
>
> I don't know how to use a filter file to compare a string in one field to
a
> string in another.
>
> If it can be done that would be great.
>
> Thanks,
> Dan Geiser
> [EMAIL PROTECTED]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> -----------------------------------------------------------------------
> Sign up for virus-free and spam-free e-mail with Nexus Technology Group
> http://www.nexustechgroup.com/mailscan
>
>

-----------------------------------------------------------------------
Sign up for virus-free and spam-free e-mail with Nexus Technology Group 
http://www.nexustechgroup.com/mailscan

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to