My list would be the same as previously cited, and yes, earthling.net is not a typo.
All of these would make it to my list as the "top faked from: domains". But of the ones that I've seen make it through to the spamtraps, none. Which is why I haven't implemented a small negative weight for these domains; the spam that pretends to come from these domains is always overwhelmingly spammy and is caught anyway. What would be useful is a rigorous test for these domains that can tell the difference between a bogus MSN.com (or whatever) and the real one. If it's definitely bogus, then I could set the action to DELETE instead of getting a HOLD from the high weight. That would take a big bite out of the messages I have to wade through with the excellent SpamReview app. (gazing at navel...) I could probably get there anyway by giving these domains a negative weight and creating a DELETE action at a high enough WEIGHT. Ah well. The volume caught (average of 700 a day) hasn't yet exceeded our ability to deal with the HOLD messages. Andrew 8) -----Original Message----- From: John Tolmachoff [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 07, 2003 3:11 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] "free" or "popular" domains > earthling.net I am sure that is earthlink.net, correct? Of course, some people claim they are aliens. :)) John Tolmachoff MCSE, CSSA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
