----- Original Message ----- 
From: "Matthew Bramble" <[EMAIL PROTECTED]>

> I view this as a fail only test, and while I could probably score it at
> 80% comfortably while it is not in widespread use, I'm only going to
> weight it the same as my SPAMDOMAINS test which I believe is at 40% of
> my fail weight.

This was my thought, as well.  I have already found e-mail that I felt was
spam that had valid SPF records.  I am currently only using SPF as positive
weight test, but am monitoring the logs to see if using it as a weight
reduction test is also viable.

> I still have to read up on this some more and figure it all out, but am
> I correct that this matches the MAILFROM address and not something else
> like the the HELO?

I believe it is the domain part of the original sender's e-mail address that
is queried for its txt record.  Scott, is this correct?  However, it appears
to use the list servers domain address if sent from a mailing list.

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to