Alejandro,

From the Declude JunkMail manual page:

   "This test will catch E-mail that is not coming from a mailserver
   that it should be coming from. This test will only work if you set
   up a file listing domains that you wish to be included in this test.
   Specifically, it will check the return address of the E-mail, and
   then check to see if the reverse DNS entry of the IP that the E-mail
   was sent from contains the domain name. If not, the E-mail fails the
   test. For example, if "hotmail.com" is listed in the
   \IMail\Declude\spamdomains.txt file, then an E-mail coming from
   "law2.hotmail.com" would not fail the test, but an E-mail from
   "mail.example.ru" would fail the test."

You can search the archives for some discussions of this. It's hardly foolproof, things like greeting cards and send-a-link sites will often fail the test because they send E-mail with a MAILFROM address of the person sending the note and not the service sending the note. I suggest that you always use the @ symbol in the first column, and you should set up two different files and score them differently. One should be for ISP's and E-mail providers such as AOL, HotMail, Yahoo, etc., and the other should be for businesses that are often spoofed such as Microsoft, PayPal, Symantec/Norton, McAfee. Be careful not to include companies that may use thrid-party mass mailers for newsletters. The second type of test can be scored higher because you are less likely to be getting greeting cards from people with real addresses at these companies than you are from places like AOL.

You might also be thinking of including your own domains in this test, but that again should be in a totally different file, and scored very low because even if you are using WHITELIST AUTH functionality, you will most definitely get users sending E-mail with your hosted addresses configured in their E-mail program but are using someone else's mail server, or without WHITELIST AUTH, they will fail when using your own mail server.

Matt


Alejandro Valenzuela wrote:


Question.. SPAMDOMAIN will test the REVDNS only for the domains included in the
spamdomains.txt file ??
Any domain not included will not be tested ??



-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble Sent: Wednesday, December 03, 2003 2:42 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SpamDomains


John,


If you include an @ symbol before the domain name, it will stop it from tagging this VERP stuff.

   @domain.moc      domain.moc
   @aol.com      .aol.com
   @yahoo.      .yahoo.
   etc...

The only drawback here is that you can only have one match (the second column) because the first column will never produce a match on REVDNS this way.

Matt




John Tolmachoff (Lists) wrote:




Why would this be caught with SPAMDOMAINS when closeout-sale.com is not in
the spamdomains.txt file?

X-RBL-Warning: SPAMDOMAINS: Spamdomain 'domain.moc' found: Address of
[EMAIL PROTECTED] sent from invalid
mail.closeout-sale.com.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You






---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to