RE: [Declude.JunkMail] SPF PASS/FAIL test format

[Colbeck, Andrew]

Karl, the correct format is as below:   SPFPASS  spf     pass x 0 0 SPFFAIL  spf     fail x 5 0 Note that nobody uses SPFPASS to grant a negative weight to an incoming message.  This is because a certain family of the bad guys definitely use SPF and their own mail servers, and we don't want to help them.   The best practice is to score a positive weight for a hit on SPFFAIL, ignore SPFUNKNOWN, and not grant a negative weight on SPFPASS.   If you want to go the extra mile, use SPFPASS as a test in a JunkMail Pro filter file in combination with other tests.   Idea 1) Use it with TESTSFAILED to stop processing early in a filter file that checks for zombie spam to mitigate false positives. Idea 2) Use it with a filter file that already awards negative points to your important business partners to award extra negative weight so as to mitigate false positives (e.g. to counterbalance a sudden listing of their IP address in SpamCop).   Andrew 8)   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Thursday, December 08, 2005 10:09 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] SPF PASS/FAIL test format Quick question on the global.cfg file…   I upgraded to 3.0.5 yesterday. Working great so far. I want to add the SPFPASS and SPFFAIL tests.. what is the format ? I want to subtract 7 points for a pass, and add 7 points for a fail…( if they’re too stupid to have an SPF by now… )   I have this, but it is obviously wrong…   SPFFAIL           spffail           x     x     7     0 SPFPASS           spfpass           x     x     -7    0     Karl Drugge B.S.I.T., A.S., M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, A+ I dream of the day when I will learn to stop asking questions to which I will regret learning the answers ( Roy Greenhilt, Order of the Stick  )    PLEASE NOTE : Florida has a very broad public records law. Most written communications to or from City officials regarding City business are public records available to the public and media upon request. Your E-mail communications may be subject to public disclosure.