> I need a good example of a $Default$JunkMail file.  Want to see if I have
a
> good setup.  I put a hold on the IPNOTINMX and created a big problem (held
> alot of legitimate mail).  I would like to see some samples of how others
> have setup their $Default$JunkMail and Global.cfg files.

I am on my way out for the day, but for your viewing pleasure.

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com

#DSBL           WARN
#MONKEYFORMMAIL WARN
#MONKEYPROXIES  WARN
ORDB            WARN
OSDUL           WARN
OSFORM          WARN
OSLIST          WARN
OSPROXY         WARN
OSRELAY         WARN
OSSMART         WARN
OSSOFT          WARN
OSSRC           WARN
SPAMCOP         WARN

DSN             WARN
NOABUSE         WARN
NOPOSTMASTER    WARN

BADHEADERS      WARN
BASE64          WARN
HELOBOGUS       WARN
IPNOTINMX       LOG
MAILFROM        WARN
PERCENT         WARN
REVDNS          WARN
ROUTING         WARN
SPAMHEADERS     WARN

#######################################################

WEIGHTRANGE10-14        LOG
WEIGHTRANGE15-19        LOG
WEIGHTRANGE20-24        LOG
WEIGHTRANGE25-29        HOLD
WEIGHTRANGE30-34        HOLD
WEIGHTRANGE35-39        DELETE
WEIGHTRANGE40-44        DELETE
WEIGHTRANGE45-49        DELETE
WEIGHT50                DELETE

ADULT1          WARN
JUNK            WARN
JUNK2           WARN

SPAMCHECK       WARN
SPAMDOMAINS     LOG

SPMMGRSPAM1     LOG
SPMMGRSPAM2     LOG
SPMMGRSPAM3     LOG
SPMMGRADULT1    LOG
SPMMGRADULT2    LOG
SPMMGRADULT3    LOG

REVIEWER1       HOLD
WHITEFILTER1    WARN
WHITEFILTER2    WARN
WHITEFILTER3    WARN
#WHITEFILTER4   WARN
WHITEFILTER5    WARN
HOSTEDDOMAINS   LOG
GRAYFILTER1     WARN
GRAYFILTER2     WARN
GRAYFILTER3     WARN
GRAYFILTER4     WARN
GRAYFILTER5     WARN
#QUESTWHITE1    WARN
MATCH           LOG
URLFILTER       LOG

AUTOWHITE1      LOG
AUTOWHITE2      LOG
AUTOWHITE3      LOG
AUTOWHITE4      LOG
AUTOWHITE5      LOG

#########################################################

#BADWHOIS       WARN
#BLARS          WARN
#CATCHALLMAILS  WARN
#COMPU          WARN
#DEVNULL        WARN
#DORKS          WARN
#DORKZTL        WARN
#DSBLALL        WARN
#DUL            WARN
#FIVETENDUL     WARN
#FIVETENOPTIN   WARN
#FIVETENOTHER   WARN
#FIVETENSRC     WARN
#FLOWGO         WARN
#GUARDBLOCK     WARN
#GUARDBULK      WARN
#GUARDDUL       WARN
#GUARDMULTI     WARN
#GUARDSINGLE    WARN
#GUARDSRC       WARN
#HEUR           WARN
#INTERSIL       WARN
#IPWHOIS        WARN
#NJABL          WARN
#NJABLDUL       WARN
#POSTFIXGATE    WARN
#RBL            WARN
#RSS            WARN
#SELWERD        WARN
#SPAMBAG        WARN
#SPAMTR         WARN
#SUMMIT         WARN
#V6NET          WARN
#VISI           WARN
#WIREHUB-DNSBL  WARN
#WIREHUB-DYNA   WARN
#ZTA            WARN

#RBLPLUS        WARN
#DULPLUS        WARN
#RBLANDDUL      WARN
#RSSPLUS        WARN
#RBLANDRSS      WARN
#DULANDRSS      WARN
#MAPSALL        WARN
CODE            xxxxxxxx
LOGFILE         E:\Declude_JM\dec####.log
LOGLEVEL        HIGH
HOP             0
HOPHIGH         2
CONSOLE         ON


XINHEADER       X-RBL-Warning: Total weight: %WEIGHT%
XOUTHEADER      X-RBL-Warning: Total weight: %WEIGHT%
XSENDER         ON
XSPOOLNAME      ON
XINHEADER       X-Tests-Failed: %TESTSFAILED%
XINHEADER       X-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]).
XINHEADER       X-Note: This e-mail was scanned by eServices For You for Viruses and 
SPAM.
XINHEADER       X-Note: To report any issues, please contact [EMAIL PROTECTED]
XOUTHEADER      X-Tests-Failed: %TESTSFAILED%
XOUTHEADER      X-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]).
XOUTHEADER      X-Note: This e-mail was scanned by eServices For You for Viruses and 
SPAM.
XOUTHEADER      X-Note: To report any issues, please contact [EMAIL PROTECTED]

WHITELIST TO    postmaster@
WHITELIST TO    abuse@

####################################################################################################################

#DSBL           ip4r            list.dsbl.org                   *               6      
 0
#MONKEYFORMMAIL ip4r            formmail.relays.monkeys.com     *               7      
 0
#MONKEYPROXIES  ip4r            proxies.relays.monkeys.com      *               7      
 0
ORDB            ip4r            relays.ordb.org                 *               2      
 0
OSDUL           ip4r            relays.osirusoft.com            127.0.0.3       2      
 0
OSFORM          ip4r            relays.osirusoft.com            127.0.0.8       2      
 0
OSLIST          ip4r            relays.osirusoft.com            127.0.0.7       2      
 0
OSPROXY         ip4r            relays.osirusoft.com            127.0.0.9       2      
 0
OSRELAY         ip4r            relays.osirusoft.com            127.0.0.2       2      
 0
OSSMART         ip4r            relays.osirusoft.com            127.0.0.5       2      
 0
OSSOFT          ip4r            relays.osirusoft.com            127.0.0.6       2      
 0
OSSRC           ip4r            relays.osirusoft.com            127.0.0.4       2      
 0
SPAMCOP         ip4r            bl.spamcop.net                  127.0.0.2       12     
 0

DSN             rhsbl           dsn.rfc-ignorant.org            127.0.0.2       10     
 0
NOABUSE         rhsbl           abuse.rfc-ignorant.org          127.0.0.4       3      
 0
NOPOSTMASTER    rhsbl           postmaster.rfc-ignorant.org     127.0.0.3       3      
 0

BADHEADERS      badheaders      x                               x               5      
 0
BASE64          base64          x                               x               12     
 0
HELOBOGUS       helovalid       x                               x               3      
 0
MAILFROM        envfrom         x                               x               15     
 0
IPNOTINMX       ipnotinmx       x                               x               0      
 -3
PERCENT         percent         x                               x               60     
 0
REVDNS          revdnsexists    x                               x               2      
 0
ROUTING         spamrouting     x                               x               10     
 0
SPAMHEADERS     spamheaders     x                               x               5      
 0

###########################################################################################################

ADULT1          fromfile        c:\Imail\declude\adult.txt              x       50     
 0
JUNK            fromfile        c:\Imail\declude\junk.txt               x       30     
 0
JUNK2           fromfile        c:\Imail\declude\junk2.txt              x       30     
 0
REVEIWER1       filter          c:\Imail\declude\reviewer.txt           x       0      
 0

WHITEFILTER1    filter          c:\Imail\declude\whitefilter1.txt       x       0      
 0
WHITEFILTER2    filter          c:\Imail\declude\whitefilter2.txt       x       0      
 0
WHITEFILTER3    filter          c:\Imail\declude\whitefilter3.txt       x       0      
 0
#WHITEFILTER4   filter          c:\Imail\declude\whitefilter4.txt       x       0      
 0
WHITEFILTER5    filter          c:\Imail\declude\whitefilter5.txt       x       0      
 0

HOSTEDDOMAINS   filter          c:\Imail\declude\hosteddomains.txt      x       0      
 0

GRAYFILTER1     filter          c:\Imail\declude\grayfilter1.txt        x       0      
 0
GRAYFILTER2     filter          c:\Imail\declude\grayfilter2.txt        x       0      
 0
GRAYFILTER3     filter          c:\Imail\declude\grayfilter3.txt        x       0      
 0
GRAYFILTER4     filter          c:\Imail\declude\grayfilter4.txt        x       5      
 0
GRAYFILTER5     filter          c:\Imail\declude\grayfilter5.txt        x       0      
 0

URLFILTER       filter          C:\Imail\declude\urlfilter.txt          x       0      
 0

MATCH           external        1       "c:\Imail\match\match.exe %MAILFROM% 
%ALLRECIPS%"       -50     0

SPAMCHECK       external        weight  "c:\Imail\spamcheck\spamchk.exe"        0      
 0

SPAMDOMAINS     spamdomains     c:\IMail\Declude\SD.txt                 x       15     
 0

SPMMGRSPAM1     external        >17             "c:\Imail\Alligate\noxmail.exe" 20     
 0
SPMMGRSPAM2     external        >39             "c:\Imail\Alligate\noxmail.exe" 10     
 0
SPMMGRSPAM3     external        >99             "c:\Imail\Alligate\noxmail.exe" 10     
 0
SPMMGRADULT1    external        <-17            "c:\Imail\Alligate\noxmail.exe" 25     
 0
SPMMGRADULT2    external        <-39            "c:\Imail\Alligate\noxmail.exe" 20     
 0
SPMMGRADULT3    external        <-74            "c:\Imail\Alligate\noxmail.exe" 20     
 0

AUTOWHITE1      external        >4              "G:\autowhite\autowhite.exe /C5380E88A 
/R5 /L1 %MAILFROM% %REALRECIPS%" -5      0
AUTOWHITE2      external        >9              "G:\autowhite\autowhite.exe /C5380E88A 
/R5 /L1 %MAILFROM% %REALRECIPS%" -15     0
AUTOWHITE3      external        >19             "G:\autowhite\autowhite.exe /C5380E88A 
/R5 /L1 %MAILFROM% %REALRECIPS%" -30     0
AUTOWHITE4      external        >29             "G:\autowhite\autowhite.exe /C5380E88A 
/R5 /L1 %MAILFROM% %REALRECIPS%" -40     0
AUTOWHITE5      external        >49             "G:\autowhite\autowhite.exe /C5380E88A 
/R5 /L1 %MAILFROM% %REALRECIPS%" -100    0

WEIGHTRANGE10-14        weightrange     x               x               10      14
WEIGHTRANGE15-19        weightrange     x               x               15      19
WEIGHTRANGE20-24        weightrange     x               x               20      24
WEIGHTRANGE25-29        weightrange     x               x               25      29
WEIGHTRANGE30-34        weightrange     x               x               30      34
WEIGHTRANGE35-39        weightrange     x               x               35      39
WEIGHTRANGE40-44        weightrange     x               x               40      44
WEIGHTRANGE45-49        weightrange     x               x               45      49

WEIGHT50                weight          x               x               50      0

######################################################################################################

#CATCHALLMAILS  catchallmails   x                       x               0       0

#BADWHOIS       rhsbl   whois.rfc-ignorant.org          127.0.0.5       3       0
#BLARS          ip4r    block.blars.org                 *               4       0
#COMPU          ip4r    blackhole.compu.net             127.0.0.4       5       0
#DEVNULL        ip4r    dev.null.dk                     127.0.0.2       5       0
#DORKS          ip4r    orbs.dorkslayers.com            127.0.0.2       5       0
#DORKZTL        ip4r    ztl.dorkslayers.com             127.0.0.2       5       0
#DSBLALL        ip4r    unconfirmed.dsbl.org            *               4       0
#DUL            ip4r    dialups.mail-abuse.org          127.0.0.3       5       0
#FIVETENDUL     ip4r    blackholes.five-ten-sg.com      127.0.0.3       5       0
#FIVETENOPTIN   ip4r    blackholes.five-ten-sg.com      127.0.0.4       5       0
#FIVETENOTHER   ip4r    blackholes.five-ten-sg.com      127.0.0.5       5       0
#FIVETENSRC     ip4r    blackholes.five-ten-sg.com      127.0.0.2       5       0
#FLOWGO         ip4r    flowgoaway.com                  127.0.0.2       5       0
#GUARDBLOCK     ip4r    spamguard.leadmon.net           127.0.0.7       3       0
#GUARDBULK      ip4r    spamguard.leadmon.net           127.0.0.4       3       0
#GUARDDUL       ip4r    spamguard.leadmon.net           127.0.0.2       3       0
#GUARDMULTI     ip4r    spamguard.leadmon.net           127.0.0.6       3       0
#GUARDSINGLE    ip4r    spamguard.leadmon.net           127.0.0.5       3       0
#GUARDSRC       ip4r    spamguard.leadmon.net           127.0.0.3       3       0
#HEUR           heuristics      x                       x               0       0
#INTERSIL       ip4r    blackholes.intersil.net         127.0.0.2       5       0
#IPWHOIS        ip4r    ipwhois.rfc-ignorant.org        127.0.0.6       3       0
#NJABL          ip4r    dnsbl.njabl.org                 127.0.0.2       5       0
#NJABLDUL       ip4r    dnsbl.njabl.org                 127.0.0.3       5       0
#POSTFIXGATE    ip4r    bl.redhatgate.com               127.0.0.1       0       0
#RBL            ip4r    blackholes.mail-abuse.org       127.0.0.2       5       0
#RSS            ip4r    relays.mail-abuse.org           127.0.0.2       5       0
#SELWERD        ip4r    xbl.selwerd.cx                  127.0.0.2       5       0
#SPAMBAG        ip4r    blacklist.spambag.org           127.0.0.2       5       0
#SPAMTR         ip4r    rbl.spam.org.tr                 127.0.0.2       5       0
#SUMMIT         ip4r    blackholes.2mbit.com            127.0.0.2       5       0
#V6NET          ip4r    spammers.v6net.org              127.0.0.2       5       0
#VISI           ip4r    relays.visi.com                 127.0.0.2       5       0
#WIREHUB-DNSBL  ip4r    blackholes.wirehub.net          127.0.0.2       5       0
#WIREHUB-DYNA   ip4r    dynablock.wirehub.net           127.0.0.2       5       0
#ZTA            ip4r    zta.birdsong.org                *               5       0

#RBLPLUS        ip4r    rbl-plus.mail-abuse.org 127.1.0.1
#DULPLUS        ip4r    rbl-plus.mail-abuse.org 127.1.0.2
#RBLANDDUL      ip4r    rbl-plus.mail-abuse.org 127.1.0.3
#RSSPLUS        ip4r    rbl-plus.mail-abuse.org 127.1.0.4
#RBLANDRSS      ip4r    rbl-plus.mail-abuse.org 127.1.0.5
#DULANDRSS      ip4r    rbl-plus.mail-abuse.org 127.1.0.6
#MAPSALL        ip4r    rbl-plus.mail-abuse.org 127.1.0.7

#######################################################################################################

#DSBL           WARN
#MONKEYFORMMAIL WARN
#MONKEYPROXIES  WARN
ORDB            WARN
OSDUL           WARN
OSFORM          WARN
OSLIST          WARN
OSPROXY         WARN
OSRELAY         WARN
OSSMART         WARN
OSSOFT          WARN
OSSRC           WARN
SPAMCOP         WARN

DSN             WARN
NOABUSE         WARN
NOPOSTMASTER    WARN

BADHEADERS      WARN
BASE64          WARN
HELOBOGUS       WARN
IPNOTINMX       LOG
MAILFROM        WARN
PERCENT         WARN
REVDNS          WARN
ROUTING         WARN
SPAMHEADERS     WARN

#######################################################

WEIGHTRANGE10-14        LOG
WEIGHTRANGE15-19        LOG
WEIGHTRANGE20-24        LOG
WEIGHTRANGE25-29        HOLD
WEIGHTRANGE30-34        HOLD
WEIGHTRANGE35-39        DELETE
WEIGHTRANGE40-44        DELETE
WEIGHTRANGE45-49        DELETE
WEIGHT50                DELETE

ADULT1          WARN
JUNK            WARN
JUNK2           WARN

SPAMCHECK       WARN

SPAMDOMAINS     LOG

SPMMGRSPAM1     LOG
SPMMGRSPAM2     LOG
SPMMGRSPAM3     LOG
SPMMGRADULT1    LOG
SPMMGRADULT2    LOG
SPMMGRADULT3    LOG

REVIEWER1       HOLD
WHITEFILTER1    WARN
WHITEFILTER2    WARN
WHITEFILTER3    WARN
#WHITEFILTER4   WARN
WHITEFILTER5    WARN
HOSTEDDOMAINS   LOG
GRAYFILTER1     WARN
GRAYFILTER2     WARN
GRAYFILTER3     WARN
GRAYFILTER4     WARN
GRAYFILTER5     WARN
URLFILTER       LOG
#QUESTWHITE1    WARN
MATCH           LOG

AUTOWHITE1      LOG
AUTOWHITE2      LOG
AUTOWHITE3      LOG
AUTOWHITE4      LOG
AUTOWHITE5      LOG

#########################################################

#BADWHOIS       WARN
#BLARS          WARN
#CATCHALLMAILS  WARN
#COMPU          WARN
#DEVNULL        WARN
#DORKS          WARN
#DORKZTL        WARN
#DSBLALL        WARN
#DUL            WARN
#FIVETENDUL     WARN
#FIVETENOPTIN   WARN
#FIVETENOTHER   WARN
#FIVETENSRC     WARN
#FLOWGO         WARN
#GUARDBLOCK     WARN
#GUARDBULK      WARN
#GUARDDUL       WARN
#GUARDMULTI     WARN
#GUARDSINGLE    WARN
#GUARDSRC       WARN
#HEUR           WARN
#INTERSIL       WARN
#IPWHOIS        WARN
#NJABL          WARN
#NJABLDUL       WARN
#POSTFIXGATE    WARN
#RBL            WARN
#RSS            WARN
#SELWERD        WARN
#SPAMBAG        WARN
#SPAMTR         WARN
#SUMMIT         WARN
#V6NET          WARN
#VISI           WARN
#WIREHUB-DNSBL  WARN
#WIREHUB-DYNA   WARN
#ZTA            WARN

#RBLPLUS        WARN
#DULPLUS        WARN
#RBLANDDUL      WARN
#RSSPLUS        WARN
#RBLANDRSS      WARN
#DULANDRSS      WARN
#MAPSALL        WARN

Reply via email to