My company gets lots of e-mail from universities.
Here's a filter that has been working good to credit good edu (mailfrom and revdns
both .edu)
I set the negative weight to credit enough points to counteract a one hit from a
strong test like sbl/sniffer/spamcop.
I've seen virus bounces get credit, which is why I end if testsfailed contains anti-av.
# ============================================================
#
#
# If mailfrom and revdns both end in .edu, it's a True EDU
#
#
#
#
#
# ============================================================
#
# If Virus Warning don't give points
# (uses Mailpure's ANTI-AV filter which should be placed higher than this in the
global.cfg file.)
#
TESTSFAILED END CONTAINS ANTI-AV
#
# End if not .edu
#
MAILFROM END NOTENDSWITH .edu
REVDNS END NOTENDSWITH .edu
MAILFROM END IS <>
MAILFROM -60 ENDSWITH .edu
Scott Fisher
Director of IT
Farm Progress Companies
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
