Re: [Declude.JunkMail] Junkmail Tests and Configs

[Matthew Bramble]

Resending because I think the first one got munged. Matt -------- Original Message -------- Subject: Re: [Declude.JunkMail] Junkmail Tests and Configs Date: Wed, 12 Nov 2003 17:10:05 -0500 From: Matthew Bramble <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> Nick, Some of the FIVETEN tests are overzealous in catching newsletters and other legit membership stuff, but at the same time, they fill in some holes that other RBL's don't cover.  So I've added them, but score them low, especially since they tend to FP along with some other things which are prone like MAILPOLICE-BULK (which would still fail my system).  I also have some counterbalances in filters for stuff that I consider legit but tends to score high or get blocked.  Some admins don't like this stuff getting through, in which case FIVETEN is less problematic, though FIVETEN is tagging Yahoo and will list some ISP mailservers, though the latter tends not to not have many problems elsewhere in my config. Those additional DNSBL tests look promising so I will give them a try. With the BCC tests as I have them configured, hardly does a thing on my system, though it can help with some dictionary type BCC senders.  You could also add in a test for just one BCC, but I wouldn't score that higher than 1 since it will catch a lot of legit stuff...but it might help more than it hurts.  Take a closer look at how I score the SUBJECTSPACES test also, that was tried as a result of something I saw here, and it works more effectively IMO if you step it instead of just as a single test.  Other similar tests like COMMENTS though is probably better left as a single test because if someone does improperly use such a thing, it is likely to appear any range of times.  Scott said setting it at 5 hits works for him and I concur. I left out my filters which is where SPAMDOMAINS is.  I do use SPAMDOMAINS and have it scored currently at 5, but I am also using it like so:     @aol.com      aol.com That helps with false positives from VERP, but it limits it to just one REVDNS check.  I'm still in the process of building my list and will share it at least privately when it is more complete. I did also notice some of your own custom filters.  Please share if you have any good tricks up your sleeve :) Matt --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.