Indeed. Hypothetically, of course, one could do add these lines to a filter:
#Sep-12-2003 AC The ISP everyone loves to hate, always has a weight of 8 due to NOABUSE:3 NOPOSTMASTER:3 IPNOTINMX:2 #Sep-23-2003 And is always on someone's shit list; added another 10 to the counterweight #Feb-28-2005 AC Updated the list of CIDR blocks via SenderBase.org and split the weight between revdns and remoteip REVDNS -9 ENDSWITH .mx.aol.com REVDNS -9 ENDSWITH .webmail.aol.com REMOTEIP -9 CIDR 152.163.225.0/24 REMOTEIP -9 CIDR 205.188.139.0/24 REMOTEIP -9 CIDR 205.188.144.0/24 REMOTEIP -9 CIDR 205.188.155.0/24 REMOTEIP -9 CIDR 205.188.156.0/24 REMOTEIP -9 CIDR 205.188.158.0/24 REMOTEIP -9 CIDR 205.188.159.0/24 REMOTEIP -9 CIDR 64.12.136.0/24 REMOTEIP -9 CIDR 64.12.137.0/24 REMOTEIP -9 CIDR 64.12.138.0/24 Of course, hypothetically speaking, one could also contrive a Scott Fisher-esque TRUE-AOL test based entirely on his technique for his TRUE-TLD tests, thus only rewarding messages with a negative weight if the mailfrom and the revdns are both aol.com ... Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 28, 2005 11:02 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] SpamCop listing AOL webmail servers > SpamCop and pretty well every other blacklisting service make no > allowance for how much good mail is coming from an IP address. They > only do blacklisting. I am not sure how many people actually do this, but I give a small weight back to the message if it was truely sent from an AOL MX. This helps when specific AOL servers get listed in Spamcop. To be honest I see very little spam sent directly from AOL servers. So this method of credit I have been doing has never been a real problem. Darrell ------------------------------------------------------------------------ Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
