Alan, When filtering out what you describe below I use the SPAMDOMAINS test.
Dan [EMAIL PROTECTED] ----- Original Message ----- From: "Alan Walters" <[EMAIL PROTECTED]> To: "Declude. JunkMail" <[EMAIL PROTECTED]> Sent: Monday, November 03, 2003 8:36 PM Subject: [Declude.JunkMail] Compare Sender to From? > Hi All, > > I've been attempting to put some finishing tweaks to our JunkMail > configuration. While testing the settings I've made so far and attempting > to discover why certain Spam still gets through, I've noticed several which > have Header information similar to the following which seems to be a > pattern: > X-Priority: 3 > X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] > X-Declude-Sender: [EMAIL PROTECTED] [82.36.135.44] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for > spam. > X-Spam-Tests-Failed: EASYNET-DYNA, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT > [9] > X-Note: This E-mail was sent from > 82-36-135-44.cable.ubr01.perr.blueyonder.co.uk ([82.36.135.44]).X-RCPT-TO: > <[EMAIL PROTECTED]> > X-UIDL: 367625200 > > Of particular interest are: > X-Declude-Sender: [EMAIL PROTECTED] [82.36.135.44] > X-Note: This E-mail was sent from > 82-36-135-44.cable.ubr01.perr.blueyonder.co.uk ([82.36.135.44]). > > Is there some intrinsic test which can compare the "lycos.com" to the > "blueyonder.co.uk" and provide a weight if they're different? I'm assuming > some REVDNS-like test, but if it's documented I'm just not recognizing it... > > Alan Walters > Director of I.T. > Royce Medical > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > ----------------------------------------------------------------------- > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > http://www.nexustechgroup.com/mailscan > > ----------------------------------------------------------------------- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
