Hi

Due to the nature of our business (online retail), we get some e-mail that
triggers most content driven spam tests (alligate, nolegitmatecontent, and
sniffer).  But, we NEED that e-mail.

We receive one frequent type of e-mail from a company that doesn't have its
act together, so I need to figure out a way to whitelist them, without
opening up the floodgates.  While the mail is sent by one company (befree),
the mail actually is being sent on behalf of others (gardenerseden in this
case). The mail fails enough test to exceed my delete weight.

Here is a typical header:

Received: from pg1bms01.befree.com [66.207.130.10] by smtp.igive.com with
ESMTP
  (SMTPD32-8.05) id A96510EC0030; Thu, 15 Jan 2004 02:03:49 -0600
Received: from pg1bms01.befree.com (localhost [127.0.0.1])
by pg1bms01.befree.com (8.8.8p2+Sun/8.8.8) with ESMTP id DAA20797
for <[EMAIL PROTECTED]>; Thu, 15 Jan 2004 03:04:19 -0500 (EST)
Date: Thu, 15 Jan 2004 03:04:19 -0500 (EST)
Message-ID: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
To: <[EMAIL PROTECTED]>
Subject: Gardeners Eden Affiliate News
Mime-Version: 1.0
Content-Type: multipart/alternative; 
boundary="----=_Part_113_4670443.1074153859335"

This IP doesn't have a reverse dns.  Just whitelisting 'befree.com' doesn't
work well, because there is a lot of spam that contains that phrase.  

Thoughts welcomed.  I know there is something easy to set up, but I'm
blanking at the moment.

Thanks ahead of time.

Rob

====================
Robert Grosshandler
www.iGive.com
Turn your shopping into philanthropy

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to