Re: [Declude.JunkMail] Another very effective filter test

[Matthew Bramble]

Bill, The first example is what I did.  BTW, I have found from monitoring that most (all so far) spammers just simply use what appears after the @ symbol instead of having something lookup the MX every time. Matt Bill Landry wrote: Matt, what the spammers do is use the names that are listed as you mx records as their helo name, so if your domain is abc.com, but you have your mx records setup as mx1.abc.com and mx2.abc.com, then you will either want to use:   HELO     0    IS    mx1.abc.com HELO     0    IS    mx2.abc.com   or   HELO     0   CONTAINS    abc.com   Bill -- =================================================== Matthew S. Bramble President and Technical Coordinator iGaia Incorporated, Operator of NYcars.com --------------------------------------------------- Office Phone: (518) 862-9042 Fax: (518) 862-9044 E-mail: [EMAIL PROTECTED] or [EMAIL PROTECTED] ===================================================