My company gets lots of e-mail from state agencies.
Here's a filter that has been working good to credit good gov (mailfrom and revdns
both .us)
I set the negative weight to credit enough points to counteract a one hit from a
strong test like sbl/sniffer/spamcop.
I've seen virus bounces get credit, which is why I end if testsfailed contains anti-av.
# ==========================================================
#
#
# If mailfrom and revdns both end in .us, it's looking good
#
# Then credit state abbreviations 60 points
#
#
#
#
#
# ==========================================================
#
# If Virus Warning don't give points
#
TESTSFAILED END CONTAINS ANTI-AV
#
# End if not .us
#
MAILFROM END NOTENDSWITH .us
REVDNS END NOTENDSWITH .us
MAILFROM END IS <>
#
# Whitelist proper states with 60 points
#
MINWEIGHT -60
MAILFROM -60 ENDSWITH .al.us
MAILFROM -60 ENDSWITH .ak.us
MAILFROM -60 ENDSWITH .az.us
MAILFROM -60 ENDSWITH .ar.us
MAILFROM -60 ENDSWITH .ca.us
MAILFROM -60 ENDSWITH .co.us
MAILFROM -60 ENDSWITH .ct.us
MAILFROM -60 ENDSWITH .dc.us
MAILFROM -60 ENDSWITH .de.us
MAILFROM -60 ENDSWITH .fl.us
MAILFROM -60 ENDSWITH .ga.us
MAILFROM -60 ENDSWITH .gu.us
MAILFROM -60 ENDSWITH .hi.us
MAILFROM -60 ENDSWITH .id.us
MAILFROM -60 ENDSWITH .il.us
MAILFROM -60 ENDSWITH .in.us
MAILFROM -60 ENDSWITH .ia.us
MAILFROM -60 ENDSWITH .ks.us
MAILFROM -60 ENDSWITH .ky.us
MAILFROM -60 ENDSWITH .la.us
MAILFROM -60 ENDSWITH .me.us
MAILFROM -60 ENDSWITH .md.us
MAILFROM -60 ENDSWITH .ma.us
MAILFROM -60 ENDSWITH .mi.us
MAILFROM -60 ENDSWITH .mn.us
MAILFROM -60 ENDSWITH .ms.us
MAILFROM -60 ENDSWITH .mo.us
MAILFROM -60 ENDSWITH .mt.us
MAILFROM -60 ENDSWITH .ne.us
MAILFROM -60 ENDSWITH .nv.us
MAILFROM -60 ENDSWITH .nh.us
MAILFROM -60 ENDSWITH .nj.us
MAILFROM -60 ENDSWITH .nm.us
MAILFROM -60 ENDSWITH .ny.us
MAILFROM -60 ENDSWITH .nc.us
MAILFROM -60 ENDSWITH .nd.us
MAILFROM -60 ENDSWITH .oh.us
MAILFROM -60 ENDSWITH .ok.us
MAILFROM -60 ENDSWITH .or.us
MAILFROM -60 ENDSWITH .pa.us
MAILFROM -60 ENDSWITH .pr.us
MAILFROM -60 ENDSWITH .ri.us
MAILFROM -60 ENDSWITH .sc.us
MAILFROM -60 ENDSWITH .sd.us
MAILFROM -60 ENDSWITH .tn.us
MAILFROM -60 ENDSWITH .tx.us
MAILFROM -60 ENDSWITH .ut.us
MAILFROM -60 ENDSWITH .vt.us
MAILFROM -60 ENDSWITH .va.us
MAILFROM -60 ENDSWITH .vi.us
MAILFROM -60 ENDSWITH .wa.us
MAILFROM -60 ENDSWITH .wv.us
MAILFROM -60 ENDSWITH .wi.us
MAILFROM -60 ENDSWITH .wy.us
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
