We haven't beaten SPAMDOMAINS sufficiently to death, so here's my contribution. I have two observations:
One:
I have a line in my sd.txt file that says:
msn.com hotmail.com
This means that if an E-mail's return address has "msn.com" in it, the reverse DNS must have either "msn.com" or "hotmail.com" in it to pass the test.
06/09/2003 11:12:07 Qa3a911c Msg failed SPAMDOMAINS (Spamdomain 'msn.com' found: Address of [EMAIL PROTECTED] sent from invalid bay3-dav52.bay3.hotmail.com.). Action=WARN.
Are you sure that the line in your sd.txt file is exactly "msn.com hotmail.com" (no spaces or other characters after "hotmail.com")?
Are you sure that you are not running an older beta version (you need to be running v1.70)? The original SPAMDOMAINS implementation only supported one entry per line.
Although SPAMDOMAINS is listed in the list of failed tests in my header above, this is a line from the log file:
06/09/2003 11:12:07 Qa3a911c NJABL:8 NOPOSTMASTER:5 NOABUSE:5 . Total weight = 18
Notice the absence of SPAMDOMAINS:5 in that list, which is what I might have expected there. My SPAMDOMAINS test is invoked this way:
SPAMDOMAINS spamdomains C:\IMail\Declude\sd.txt x 5 0
This is unusual -- that line should show any tests that were triggered and had a weight other than 0, and the SPAMDOMAINS test was triggered and had a weight of 5.
What version of Declude JunkMail are you running ("\IMail\Declude -diag")?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
