> despite the lack of scoring. I'm using some other tweaks such as doing > an IS instead of CONTAINS for the FQDN, and listing the addresses with > and without the mail. in front of my domains since my MX records use the > mail. subdomain.
Acutally, would it not be better to use ENDSWITH rather than IS? Your way, if a message HELO was fkdhoosl.example.com, it would not be caught, but if using ENDSWITH it would be. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
