So in the global we'd have: First the actual tests with no value for failure MAILPOLICE-BULK-REVDNS dnsbl %REVDNS%.bulkk.rhs.mailpolice.com * 0 0 MAILPOLICE, etc.
Then the Filter (Using the example construct below) with a weight MAILPOLICE filter X:\imail\declude\MailPolice.txt x 10 0 Is that correct? Thanks, Thursday, May 13, 2004, 4:17:58 PM, Matt <[EMAIL PROTECTED]> wrote: M> That would be awesome if it really does work. I'll give it a try this M> evening! Am I also to assume that this will work with the %HELO% as M> well? That would rock :) M> Just a note of caution to others, if you use MailPolice Bulk on the Mail M> From, and you try this technique, you probably don't want to be scoring M> a double hit, instead a combo filter using TESTSFAILED to assess one M> value for either failure would be the best, i.e. M> ----- MailPolice.txt ----- M> TESTSFAILED 0 CONTAINS MAILPOLICE-BULK M> TESTSFAILED 0 CONTAINS MAILPOLICE-BULK-REVDNS M> ...and then give it one score in the Global.cfg. M> Thanks, M> Matt M> R. Scott Perry wrote: >> >>> Is there any shot of you enabling a different type of test built to >>> do RHS lookups from the reverse DNS value? >> >> >> Actually, you can use something like: >> >> BULK-REVDNS dnsbl %REVDNS%.bulk.rhs.mailpolice.com >> * x 0 >> >> >> -Scott >> --- >> Declude JunkMail: The advanced anti-spam solution for IMail >> mailservers since 2000. >> Declude Virus: Ultra reliable virus detection and the leader in >> mailserver vulnerability detection. >> Find out what you've been missing: Ask for a free 30-day evaluation. >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. >> >> ---- Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364 Fax: (972) 788-5049 ---- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
