Why not setup a filter and negative weight the helo string for beefree.com. Use enough negative weight to deliver the mail.
Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Robert > Grosshandler > Sent: Saturday, January 17, 2004 7:22 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Whitelist strategy needed > > > Hi > > Due to the nature of our business (online retail), we get some e-mail that > triggers most content driven spam tests (alligate, nolegitmatecontent, and > sniffer). But, we NEED that e-mail. > > We receive one frequent type of e-mail from a company that > doesn't have its > act together, so I need to figure out a way to whitelist them, without > opening up the floodgates. While the mail is sent by one company > (befree), > the mail actually is being sent on behalf of others (gardenerseden in this > case). The mail fails enough test to exceed my delete weight. > > Here is a typical header: > > Received: from pg1bms01.befree.com [66.207.130.10] by smtp.igive.com with > ESMTP > (SMTPD32-8.05) id A96510EC0030; Thu, 15 Jan 2004 02:03:49 -0600 > Received: from pg1bms01.befree.com (localhost [127.0.0.1]) > by pg1bms01.befree.com (8.8.8p2+Sun/8.8.8) with ESMTP id DAA20797 > for <[EMAIL PROTECTED]>; Thu, 15 Jan 2004 03:04:19 -0500 (EST) > Date: Thu, 15 Jan 2004 03:04:19 -0500 (EST) > Message-ID: <[EMAIL PROTECTED]> > From: [EMAIL PROTECTED] > To: <[EMAIL PROTECTED]> > Subject: Gardeners Eden Affiliate News > Mime-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_Part_113_4670443.1074153859335" > > This IP doesn't have a reverse dns. Just whitelisting > 'befree.com' doesn't > work well, because there is a lot of spam that contains that phrase. > > Thoughts welcomed. I know there is something easy to set up, but I'm > blanking at the moment. > > Thanks ahead of time. > > Rob > > ==================== > Robert Grosshandler > www.iGive.com > Turn your shopping into philanthropy > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
