That would be awesome if it really does work. I'll give it a try this evening! Am I also to assume that this will work with the %HELO% as well? That would rock :)

Just a note of caution to others, if you use MailPolice Bulk on the Mail From, and you try this technique, you probably don't want to be scoring a double hit, instead a combo filter using TESTSFAILED to assess one value for either failure would be the best, i.e.

----- MailPolice.txt -----
TESTSFAILED      0      CONTAINS      MAILPOLICE-BULK
TESTSFAILED      0      CONTAINS      MAILPOLICE-BULK-REVDNS

...and then give it one score in the Global.cfg.

Thanks,

Matt



R. Scott Perry wrote:


Is there any shot of you enabling a different type of test built to do RHS lookups from the reverse DNS value?


Actually, you can use something like:

BULK-REVDNS dnsbl %REVDNS%.bulk.rhs.mailpolice.com * x 0


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================


--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to