Since John does not want to plug the software.. Let me do it. If you really want to help the false positives.. Seriously look into AutoWhitelist.
It is a common sense program that works great. Simply as people send each other email their email is recorded and negatively factored in the final weight. The more they email to each other the less likelihood they have to get trapped. We have almost gotten rid of our FPs. Lets just hope John adds a global whitelist.. If one person is talking to a client then others should also be as easily get an email from that client- regardless of their level of communication with him/her. I think the same approach as Declude would be great.. Global or local option. I know if we had the global option I would simply make one huge global database. Oh well.. Just thought to drop my suggestion one more time :) Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, June 02, 2003 12:37 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] yahoo as spam Catching almost no FP with holding at 10? I don't think so. Anything coming from Yahoo.com will then automatically be at half of your hold weight. This is a known problem with Yahoo. Couple of recommendations. Change your weighting setup. Setup a white filter. User another external program to help whitelist. (Sorry, cheap plug.) Adjust your weights. Setup a grey filter. Etc. Also, SpamCop has been discussed a couple of times in IMO does not warrant a HOLD. Personally, I do not use FIVTENSCR. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of andyb > Sent: Monday, June 02, 2003 10:16 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] yahoo as spam > > > Hi, > > > > I have a customer, she is sending email from her yahoo account to > > her > email > > address here. It is being caught as spam, as per included log > > entries. > > > > Good ole yahoo, not RFC compliant as the postmaster and abuse email > > addresses. > > > > I have also included my config files. This config has worked very > > well in > > the past, almost no false positives and catching approx 85% of all > > spam. Comments for improvement, please. > > > > Thanks, Andy > > > > > > 06/02/2003 05:51:08 Q1e0a290 FIVETENSRC:5 NOPOSTMASTER:3 > NOABUSE:2 . > Total > > weight = 10 > > 06/02/2003 05:51:08 Q1e0a290 Msg failed FIVETENSRC > > (184.129.136.216.blackholes.five-ten-sg.com.). Action=IGNORE. > > 06/02/2003 05:51:08 Q1e0a290 Msg failed NOPOSTMASTER (Not supporting > > [EMAIL PROTECTED]). Action=IGNORE. 06/02/2003 05:51:08 Q1e0a290 Msg > > failed NOABUSE (Not supporting [EMAIL PROTECTED]). Action=IGNORE. > > 06/02/2003 05:51:08 Q1e0a290 Msg failed WEIGHT10 (Weight of 10 reaches or > > exceeds the limit of 10.). Action=HOLD. > > 06/02/2003 05:51:08 Q1e0a290 Subject: Fwd: RE: Ed Tech Day / Joyce > > Carol Oates 06/02/2003 05:51:08 Q1e0a290 From: > > [EMAIL PROTECTED] To: [EMAIL PROTECTED] > > > > > > $default$.junkmail > > > > BLACKLIST DELETE > > OSDUL HOLD > > OSSOFT HOLD > > ORDB HOLD > > SPAMCOP HOLD > > ZONEIN HOLD > > MAILFROM HOLD > > SPAMROUTING HOLD > > PERCENT HOLD > > WEIGHT10 HOLD > > > > # Global.cfg: Declude JunkMail configuration file > > > > CODE XXXXXXX > > > > LOGFILE D:\Imail\spool\spam####.log > > LOGLEVEL MID > > LOG_OK NONE > > HOP 0 > > > > DNS 216.153.138.61 > > > > CONSOLE OFF > > IPBYPASS 216.153.138.61 # NS1_Thumper > > > > XSENDER ON > > XSPOOLNAME ON > > XINHEADER X-Note: Checked for SPAM and Viruses by Thumpernet - > > http://www.thumpernet.com > > XINHEADER X-note: Total spam weight of the emai is %WEIGHT% > > XOUTHEADER X-Note: Please send abuse reports to > [EMAIL PROTECTED] > > > > BLACKLIST fromfile d:\imail\declude\blacklist.txt > > > > OSRELAY ip4r relays.osirusoft.com 127.0.0.2 2 > > 0 > > OSDUL ip4r relays.osirusoft.com 127.0.0.3 > > OSSRC ip4r relays.osirusoft.com 127.0.0.4 5 0 > > OSSOFT ip4r relays.osirusoft.com 127.0.0.6 > > OSLIST ip4r relays.osirusoft.com 127.0.0.7 3 > > 0 > > SPAMCOP ip4r bl.spamcop.net 127.0.0.2 > > > > FIVETENSRC ip4r blackholes.five-ten-sg.com 127.0.0.2 5 > > 0 > > FIVETENDUL ip4r blackholes.five-ten-sg.com 127.0.0.3 5 > > 0 > > FIVETENOPTIN ip4r blackholes.five-ten-sg.com 127.0.0.4 3 > > 0 > > FIVETENOTHER ip4r blackholes.five-ten-sg.com 127.0.0.5 5 > > 0 > > > > DSN rhsbl dsn.rfc-ignorant.org 127.0.0.2 2 > > 0 > > NOPOSTMASTER rhsbl postmaster.rfc-ignorant.org 127.0.0.3 3 > > 0 > > NOABUSE rhsbl abuse.rfc-ignorant.org 127.0.0.4 2 > > 0 > > > > MAILFROM envfrom > > BADHEADERS badheaders x x 4 0 > > SPAMHEADERS spamheaders x x 4 0 > > SPAMROUTING spamrouting > > HEUR10 heuristics 10 x 5 0 > > PERCENT percent > > > > WEIGHT10 weight x x 10 0 > > > > WHITELIST FROM [EMAIL PROTECTED] > > WHITELIST FROM @MAILER-DAEMONitrogen.packetcity.com > > WHITELIST TO [EMAIL PROTECTED] > > WHITELIST TO [EMAIL PROTECTED] > > WHITELIST IP 216.153.138. # Anything from our address space > > WHITELIST FROM @go2france.com > > WHITELIST FROM @mail.go2france.com > > WHITELIST FROM @list.ipswitch.com > > WHITELIST FROM @declude.com > > WHITELIST FROM @signup.universalstudios.com #For JGL 1/4/02 > > WHITELIST FROM @listserv.usairways.com #For Rita 1/4/02 > > WHITELIST FROM @centro.org #for [EMAIL PROTECTED] 1/7/02 > > WHITELIST FROM @upstate.edu #for lisa b 2/5/02 > > WHITELIST FROM @listsrv02.usairways.com > > WHITELIST FROM @registrars.com > > WHITELIST FROM @hammond-irving.com #reported to spamcop > > WHITELIST FROM @hillside.com #Peg 02/12/02 > > WHITELIST FROM [EMAIL PROTECTED] #Peg 02/22/02 WHITELIST FROM > > @youngliving.com #Peg 02/27/02 > > WHITELIST FROM @irco.com #Peg 03/06/02 > > WHITELIST FROM @TerritoryMortgage.com #Peg 04/04/02 WHITELIST FROM > > @territoryloan.com #Peg 05/30/02 > > WHITELIST FROM @skf.com #Peg 06/12/02 > > WHITELIST FROM @paypal.com #Peg 07/10/02 > > WHITELIST FROM [EMAIL PROTECTED] #Peg 08/08/02 > > WHITELIST FROM @usa.redcross.org #Peg 08/19/02 > > WHITELIST FROM [EMAIL PROTECTED] #Peg 09/19/02 WHITELIST FROM > > [EMAIL PROTECTED] #for k O'Hara 1/6/03 > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
