Looking at yesterday's numbers: About 2200 mails after I added the new MailPolice tests.
I had 363 matches on the MailPolice-REVDNS. 362 spam, 1 not spam. The bad news is that all 362 were already over my hold weight. I had 281 matches on the MailPolice-HELO. 281 spam. All 281 MailPolice-HELO's also matched on the MailPolice-REVDNS Out of the 281 matches on the MailPolice-HELO, 24 were also matched on MailPolice-Bulk. Out of the 281 matches on the MailPolice-HELO, 1 was also matched on MailPolice-Porn. Out of the 363 matches on the MailPolice-REVDNS, 27 were also matched on MailPolice-Bulk. Out of the 363 matches on the MailPolice-REVDNS, 2 were also matched on MailPolice-Porn. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 05/13/04 05:34PM >>> Here's a working config for MailPolice's dynamic test (PPP/DSL/cable) that test's both the reverse DNS entry and the HELO entry (zombie spamware often uses the reverse DNS entry for the HELO). MAILPOLICE-DYNA-REVDNS dnsbl %REVDNS%.dynamic.rhs.mailpolice.com 127.0.0.2 0 0 MAILPOLICE-DYNA-HELO dnsbl %HELO%.dynamic.rhs.mailpolice.com 127.0.0.2 0 0 I have verified that this works. My only concern is what MailPolice considers appropriate for the DSL and Cable entries. Nevertheless, if their list sucks, it shouldn't be that hard to create our own.... It also appears that it may be a good idea to start pumping a zone full of what might have been filtered with custom filters before for both simplicity, and for efficiency. There are also other RHSBL tests out there appropriate for the other technique shown earlier, and there are some interesting ones at MailPolice that could come in handy such as their Web-mail test which in combination with another filter like CMDSPACE, XBL, etc., could come in handy. Matt -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
