Great, thanks for the detailed explanation. I would like to HOLD all mail that fails the BADHEADERS test, then. How do I go about doing this?
Thanks again -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 21, 2003 12:40 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question >I've seen that most of the spam emails, regardless of the weight, seem >to fail the SPAMHEADERS, BADHEADERS, and IPNOTINMX tests. Question: do you >guys HOLD email based on any of these three tests? If so, how is this done? >Is this a smart approach? The SPAMHEADERS test will catch quite a bit of legitimate E-mail (mostly solicited E-mail, such as orders and bulk E-mail from companies you have done business with, as opposed to individual person-to-person E-mail), mostly because of all the web mailers that were written by web developers rather than purchased or written by web programmers. The IPNOTINMX test shouldn't be used to block E-mail, as it is one of the few tests that it is OK for a legitimate mailserver to fail. This is often the case with larger domains, where there are separate mailservers for incoming vs. outgoing E-mail. The BADHEADERS test, though, now catches about 50% of all spam, and will never catch any legitimate E-mail (unless it is sent from a broken mail client that needs to be fixed, and where you might not have received the E-mail anyways). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
