A better way to do this is to setup a RDNS Filter and add a negative weight
for any domain that you add that resolves correctly, like yahoo.com.  For
example:

Global.cfg:
REVDNS-FILTER filter M:\IMail\Declude\RevDNS-Filter.txt x 0 0

REVDNS-FILTER (samples):
REVDNS -10 ENDSWITH .travelocity.com
REVDNS -10 ENDSWITH .untd.com
REVDNS -05 ENDSWITH .verio.com
REVDNS -05 ENDSWITH .verio.net
REVDNS -05 ENDSWITH .verizon.com
REVDNS -05 ENDSWITH .verizon.net
REVDNS -10 ENDSWITH .yahoo.com
REVDNS -05 ENDSWITH .lockergnome.com

Bill
----- Original Message ----- 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, June 09, 2003 9:20 AM
Subject: RE: [Declude.JunkMail] Using SPAMDOMAINS and negative weights?


>
> >Why not configure it like
> >
> >SPAMDOMAINS     spamdomains     C:\IMail\Declude\sd.txt x 5 -5
> >
> >This will give +5 points to any mail having a sender-domain listet in
> >sd.txt and failing this test. On the other side any legit message having
> >such a sender-domain that come from the right mailserver will have -5
> >points. So this message can also fail other test without creating false
> >positives.
> >
> >I'm not sure about this. Seems like I miss something - it sounds to
> >simple.  ;-)
>
> The catch here is that all E-mail from domains that aren't listed in the
> sd.txt file will get a weight of -5 added to them, so that spam from
> domains not listed in the sd.txt file will be more likely to be delivered.
>
>                                                     -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you have been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to