Which is why you subtract points for true IP's of your own servers (to compensate for the other lines catching the domain name)!
K -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Thursday, September 25, 2003 3:21 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Another very effective filter test But then that would cause a problem as I believe Karen had pointed out of when you have a backup MX that sends to the primary. Then again, 7 is only about 1/3 of my hold weight. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry Sent: Thursday, September 25, 2003 12:03 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Another very effective filter test Matt, what the spammers do is use the names that are listed as you mx records as their helo name, so if your domain is abc.com, but you have your mx records setup as mx1.abc.com and mx2.abc.com, then you will either want to use: HELO 0 IS mx1.abc.com HELO 0 IS mx2.abc.com or HELO 0 CONTAINS abc.com Bill --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
