Basically that is what I have done.  I have weight set to 20 before it
stops anything so bounce alone cannot do it.  Trouble is RVSDNS (5) and
spamheaders(5) can.  I figure if all three are hit, chances are it is
real and not just a poorly run server.


Jim Rooth
Klotron, Inc.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Tom
Sent: Monday, July 29, 2002 4:44 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Adding BOUNCE to your Kill list?
Conclusion

> Here again, I only look for it in the MAILFROM and not in the body or
> subject.  Maybe that is why I haven't had any problems...yet.
Knocking
> on every piece of wood I can find...


Ok, after doing some more research I came up with the following
conclusion:
I created another FROMFILE called WFILE.TXT and placed the following
addresses
inside of it:
-------------------------
@BOUNCE         BOUNCE1
.BOUNCE         BOUNCE2
BOUNCE.         BOUNCE3
BOUNCE@         BOUNCE4
-------------------------

Then I set up a test inside the Declude CFG file with a weight of 10:
---------------------------------------------------------------------
BFROM           fromfile        d:\imail\declude\wfile.txt      x
10      0
---------------------------------------------------------------------

And finally I set up the test inside the $default$.junkmail file to
warn:
-------------------------
BFROM           WARN
-------------------------

This way BOUNCE by itself would not fail completely unless it fails more
than one test.  Hopefully this helps catch more spam using the BOUNCE
from
address and doesn't disturb legitimate mail.

Regards,
Tom
Image`fx

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.380 / Virus Database: 213 - Release Date: 7/24/2002


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.380 / Virus Database: 213 - Release Date: 7/24/2002



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to