[Declude.JunkMail] e-commerce counter weights

2004-03-29 Thread Technical Support



Most of my false 
positives are coming from e-commerce sites, where automatic email are generated 
after an order has been placed. What sort of counter weighting do you guys 
use to balance out these types of messages? I can't decide on anything to 
identify these types of messages with that spammers don't already try to 
fake. Any help would be much appreciated.


Thank you for making YourNET 
Connection your connection to the world

Jim O'Keefe Technical 
Support @YourNET Connection, Inc. [EMAIL PROTECTED] 




Re: [Declude.JunkMail] e-commerce counter weights

2004-03-29 Thread Darin Cox



We just use a negative weight list, and add new 
domains to the list as needed. Note that it's not a good idea to have any 
of your hosted domain in the negative weight list, or ISP domains such as aol, 
yahoo, msn, etc. as you'll just end up letting a lot of spam through that 
way.

NEGATIVEWEIGHTLISTfromfile 
F:\IMail\Declude\negativeweight.txt x -25 0
We also use a "positive weight list", which is 
probably a misnomer since it add to the spam weighta better name would 
probably be greylist. We add known spam domains to this list. 
Similar to a blacklist, but we only add enough weight to hold on the greylist, 
while the blacklist has enough weight to delete.

POSITIVEWEIGHTLISTfromfile 
F:\IMail\Declude\positiveweight.txt x 20 0
You'll probably want to adjust the weights to match 
your scale. We use the positive weight to put it just into the hold range, 
while the negative weight would take an email from the middle of the hold range 
down to zero.
Darin.


- Original Message - 
From: Technical Support 
To: [EMAIL PROTECTED] 

Sent: Monday, March 29, 2004 3:35 PM
Subject: [Declude.JunkMail] e-commerce counter weights

Most of my false 
positives are coming from e-commerce sites, where automatic email are generated 
after an order has been placed. What sort of counter weighting do you guys 
use to balance out these types of messages? I can't decide on anything to 
identify these types of messages with that spammers don't already try to 
fake. Any help would be much appreciated.


Thank you for making YourNET 
Connection your connection to the world

Jim O'Keefe Technical 
Support @YourNET Connection, Inc. [EMAIL PROTECTED] 




Re: [Declude.JunkMail] e-commerce counter weights

2004-03-29 Thread Nick Hayer
On 29 Mar 2004 at 14:35, Technical Support wrote:

  What
 sort of counter weighting do you guys use to balance out these types
 of messages?  I can't decide on anything to identify these types of
 messages with that spammers don't already try to fake.  Any help would
 be much appreciated.
As Darin responded you should use a negative weighted filter. I call mine 
compensatory.txt
In it include REVDNS, CONTAINS, MAILFROM, etc. from the false 
positives that will counter weight the spam scores. As far a phrase 
that you could add for a BODY tag kinda hard. But they may work for 
you like 'Order shipped' , etc.

I make compensatory.txt the first filter in global.cfg also; to be 
sure SKIPIFWEIGHT feature is used in the other filter files.

-Nick Hayer


 
 
 Thank you for making YourNET Connection your connection to the world
 
 Jim O'Keefe 
 Technical Support 
 @YourNET Connection, Inc. 
  mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] 
 
 


[AUTOMATED NOTE: Your mail server [170.222.200.91] is missing a reverse DNS entry. All 
Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry 
will cause your mail to be treated as spam on some servers, such as AOL.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.