I've also seen several legitimate emails that failed the BADHEADERS test. After studying a test group for about 3 weeks, I came to the conclusion that I could catch a lot of spam email but still allow 99+% of legitimate email to go through by using a Weight test with a value of 22.
This still allows a lot of spam to go through, but I figure we're catching about 30% of the total spam using this test. I'll try to refine the weight test or another as we go on. I haven't attempted to change any of the weighted values yet. Oh.. and this doesn't count all the I have in kill.lst. Some that get through Declude are stopped by Domain Processing Rules. BTW.. in the first 24 hours, we put into hold approximately 10% of our total incoming email using a WEIGHT22 test. Anyone using this same approach?? Got any ideas to get most of the other crap email?? ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 29, 2002 11:47 AM Subject: Re: [Declude.JunkMail] any way > > >I got an on-line order confirmation from QuillCorp.com that failed both > >BADHEADERS and SPAMHEADERS. > > Then they definitely need to fix the problem. I would suggest contacting > [EMAIL PROTECTED] to let them know about the problem. Any E-mail > that fails the BADHEADERS test indicates a serious issue. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- > [This E-mail scanned for viruses at HNB.com] > > --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
