I guess I might add more weight to SAL, maybe reduce the negative weight of IPNOTINMX to start.
I have some of the following in a filter file to add little weight, I don't know if it is a great idea but it usually helps. HEADERS 0 CONTAIN Bargains.net HEADERS 0 CONTAIN Bargain.net HEADERS 0 CONTAIN Deals.com HEADERS 0 CONTAIN free-gifts HEADERS 0 CONTAIN TailWaggingOffer HEADERS 0 CONTAIN specialoffer HEADERS 0 CONTAIN freeoffers HEADERS 0 CONTAIN dealz These are just some of the "little weights" I add, so if a mail has enough of this it will get held (hopefully deleted). I'm assuming that you are using Declude Pro.... Marc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Bridges, Samantha Sent: Monday, October 06, 2003 09:15 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Question - Weight 10? Good morning all. I blocked weight 10 and found it blocking too many legitimate mail. I went back to Warn for weight 10 and starting getting more spam. Below is the headers from a spam message that is failing the weight 10 test. It is spam and I want to find another way to block mail like this. How would you block this message, since you cannot block weight 10 and still get legitimate mail? Thanks for any help. Samantha Microsoft Mail Internet Headers Version 2.0 Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org with Microsoft SMTPSVC(5.0.2195.6713); Sun, 5 Oct 2003 19:28:08 -0400 Received: from SMTP32-FWD by apollo.misd.net (SMTP32) id A00FA0303; Sun, 5 Oct 2003 19:24:26 -0400 Received: from pc1.passfelt.com [207.134.164.19] by apollo.misd.net (SMTPD32-8.02) id A829F477014E; Sun, 05 Oct 2003 19:24:25 -0400 Message-Id: <[EMAIL PROTECTED]> From: Student Loans <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Reply-to: <[EMAIL PROTECTED]> Subject: CUT YOUR STUDENT LOAN PAYMENTS BY UP TO 50% Date: Sun, 5 Oct 2003 19:10:58 -0400 ID: MSG_12412951-10673063-felton4 X-Info: Please report any abuse from the part of list owner to [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe" X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL10878 X-RBL-Warning: IPNOTINMX: X-RBL-Warning: WEIGHT10: Weight of 10 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [207.134.164.19] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: RELAY, , IPNOTINMX, WEIGHT10 [10] X-IMAIL-SPAM-STATISTICS: 1.0000 Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 05 Oct 2003 23:28:08.0627 (UTC) FILETIME=[55BD6030:01C38B98] --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/plain; charset = "iso-8859-1"; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe Content-Type: text/html; charset = "iso-8859-1"; Content-Disposition: inline Content-Transfer-Encoding: 8bit --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe-- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
