Thanks, Bill. I add my vote for ENDSWITH...
-d ----- Original Message ----- From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 16, 2004 2:15 AM Subject: Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion > ----- Original Message ----- > From: Dave Doherty > > > What is the logic involved with these entries? INCLUDES? IS? ENDSWITH? > something else? > > It's CONTAINS > > > For example, if I include the following line in my SPAMDOMAINS file... > > > > msn.com hotmail.com > > > > ... which of the following messages would pass the test: > > > > from: [EMAIL PROTECTED] > > rdns: yadayada.scammsn.com (fail?) > Pass, because SPAMDOMAINS is based on CONTAINS, and the RDNS can contain > msn.com or hotmail.com, and this does contain msn.com > > rdns: yadayada.scamhotmail.com (fail?) > Pass, same reason > > rdns: yadayada.scam.msn.com (pass?) > Pass, same reason > > rdns: yadayada.scam.hotmail.com (pass?) > Pass, same reason > > rdns: yadayada.msn.com.phish.com (???) > Pass, same reason > > rdns: yadayada.hotmail.com.phish.com (???) > Pass, same reason > > I have asked in the past that the SPAMDOMAINS test be changed to ENDSWITH, > but no such luck... > > Bill > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
