Hi All, I've been attempting to put some finishing tweaks to our JunkMail configuration. While testing the settings I've made so far and attempting to discover why certain Spam still gets through, I've noticed several which have Header information similar to the following which seems to be a pattern: X-Priority: 3 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [82.36.135.44] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: EASYNET-DYNA, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT [9] X-Note: This E-mail was sent from 82-36-135-44.cable.ubr01.perr.blueyonder.co.uk ([82.36.135.44]).X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 367625200
Of particular interest are: X-Declude-Sender: [EMAIL PROTECTED] [82.36.135.44] X-Note: This E-mail was sent from 82-36-135-44.cable.ubr01.perr.blueyonder.co.uk ([82.36.135.44]). Is there some intrinsic test which can compare the "lycos.com" to the "blueyonder.co.uk" and provide a weight if they're different? I'm assuming some REVDNS-like test, but if it's documented I'm just not recognizing it... Alan Walters Director of I.T. Royce Medical --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
