My company gets lots of e-mail from US government agencies.
Here's a filter that has been working good to credit good gov (mailfrom and revdns
both .gov)
I set the negative weight to credit enough points to counteract a one hit from a
strong test like sbl/sniffer/spamcop.
I've seen virus bounces get credit, which is why I end if testsfailed contains anti-av.
# ==========================================================
#
#
# If mailfrom and revdns both end in .gov, it's a True GOV
#
#
#
#
#
# ==========================================================
#
# If Virus Warning don't give points
#
TESTSFAILED END CONTAINS MP-ANTI-AV
# End if not .gov
#
MAILFROM END IS <>
MAILFROM END NOTENDSWITH .gov
#
# Factor in the states
#
MINWEIGHT -60
REVDNS -60 ENDSWITH .state.al.us
REVDNS -60 ENDSWITH .state.ak.us
REVDNS -60 ENDSWITH .state.az.us
REVDNS -60 ENDSWITH .state.ar.us
REVDNS -60 ENDSWITH .state.ca.us
REVDNS -60 ENDSWITH .state.co.us
REVDNS -60 ENDSWITH .state.ct.us
REVDNS -60 ENDSWITH .state.dc.us
REVDNS -60 ENDSWITH .state.de.us
REVDNS -60 ENDSWITH .state.fl.us
REVDNS -60 ENDSWITH .state.ga.us
REVDNS -60 ENDSWITH .state.gu.us
REVDNS -60 ENDSWITH .state.hi.us
REVDNS -60 ENDSWITH .state.id.us
REVDNS -60 ENDSWITH .state.il.us
REVDNS -60 ENDSWITH .state.in.us
REVDNS -60 ENDSWITH .state.ia.us
REVDNS -60 ENDSWITH .state.ks.us
REVDNS -60 ENDSWITH .state.ky.us
REVDNS -60 ENDSWITH .state.la.us
REVDNS -60 ENDSWITH .state.me.us
REVDNS -60 ENDSWITH .state.md.us
REVDNS -60 ENDSWITH .state.ma.us
REVDNS -60 ENDSWITH .state.mi.us
REVDNS -60 ENDSWITH .state.mn.us
REVDNS -60 ENDSWITH .state.ms.us
REVDNS -60 ENDSWITH .state.mo.us
REVDNS -60 ENDSWITH .state.mt.us
REVDNS -60 ENDSWITH .state.ne.us
REVDNS -60 ENDSWITH .state.nv.us
REVDNS -60 ENDSWITH .state.nh.us
REVDNS -60 ENDSWITH .state.nj.us
REVDNS -60 ENDSWITH .state.nm.us
REVDNS -60 ENDSWITH .state.ny.us
REVDNS -60 ENDSWITH .state.nc.us
REVDNS -60 ENDSWITH .state.nd.us
REVDNS -60 ENDSWITH .state.oh.us
REVDNS -60 ENDSWITH .state.ok.us
REVDNS -60 ENDSWITH .state.or.us
REVDNS -60 ENDSWITH .state.pa.us
REVDNS -60 ENDSWITH .state.pr.us
REVDNS -60 ENDSWITH .state.ri.us
REVDNS -60 ENDSWITH .state.sc.us
REVDNS -60 ENDSWITH .state.sd.us
REVDNS -60 ENDSWITH .state.tn.us
REVDNS -60 ENDSWITH .state.tx.us
REVDNS -60 ENDSWITH .state.ut.us
REVDNS -60 ENDSWITH .state.vt.us
REVDNS -60 ENDSWITH .state.va.us
REVDNS -60 ENDSWITH .state.vi.us
REVDNS -60 ENDSWITH .state.wa.us
REVDNS -60 ENDSWITH .state.wv.us
REVDNS -60 ENDSWITH .state.wi.us
REVDNS -60 ENDSWITH .state.wy.us
REVDNS -60 ENDSWITH .gov
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
