A better way to do this is to setup a RDNS Filter and add a negative weight for any domain that you add that resolves correctly, like yahoo.com. For example:
Global.cfg: REVDNS-FILTER filter M:\IMail\Declude\RevDNS-Filter.txt x 0 0 REVDNS-FILTER (samples): REVDNS -10 ENDSWITH .travelocity.com REVDNS -10 ENDSWITH .untd.com REVDNS -05 ENDSWITH .verio.com REVDNS -05 ENDSWITH .verio.net REVDNS -05 ENDSWITH .verizon.com REVDNS -05 ENDSWITH .verizon.net REVDNS -10 ENDSWITH .yahoo.com REVDNS -05 ENDSWITH .lockergnome.com Bill ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 09, 2003 9:20 AM Subject: RE: [Declude.JunkMail] Using SPAMDOMAINS and negative weights? > > >Why not configure it like > > > >SPAMDOMAINS spamdomains C:\IMail\Declude\sd.txt x 5 -5 > > > >This will give +5 points to any mail having a sender-domain listet in > >sd.txt and failing this test. On the other side any legit message having > >such a sender-domain that come from the right mailserver will have -5 > >points. So this message can also fail other test without creating false > >positives. > > > >I'm not sure about this. Seems like I miss something - it sounds to > >simple. ;-) > > The catch here is that all E-mail from domains that aren't listed in the > sd.txt file will get a weight of -5 added to them, so that spam from > domains not listed in the sd.txt file will be more likely to be delivered. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you have been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.