Scott, I specifically specified 3 characters not 4 to allow for the 2 character TLDs.
I would be very interested to see the results based on 3 characters, not 4. Ratio of 1 to 13 is not bad if we are talking about a resulting penalty of 20-25% of hold weight. Also, if the test could be configured to not only allow for specified tests failed end but also other parameters say HELO contains problematicdomaincausingtoomanyfalsepositives would that help? John T eServices For You "Seek, and ye shall find!" > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher > Sent: Monday, September 04, 2006 8:15 AM > To: [email protected] > Subject: Re: [Declude.JunkMail] Test idea > > I ran a query on this looking at my August email results (228889 emails): > > Excluding HELOBOGUS > Excluding (timeout) and [No Reverse DNS] and (Private IP) > Looking at last 4 chars of helo <> last 4 chars of revdns > > 1487 ham: > including gov / us mismatches > a fair amount of .com / .org with DSL / CABLE static revdns > small amount of valid mismatches shaw.ca / shawcable.net > mindspring.com/earthlink.net. I've definitely seen this from some non US > mailservers where a country code is in one and .net is in another. > > 19668 spam > lots of zommbies,especially non-US > Fair amount of static spammers .net / .info mismatches for example > > ----- Original Message ----- > From: "John T (Lists)" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Monday, September 04, 2006 1:29 AM > Subject: [Declude.JunkMail] Test idea > > > > Idea! (Ouch) > > > > If email failed HELOBOGUS or NOREVDNS (or other specified tests) END > > otherwise compare the last 3 characters of the HELO with the last 3 > > characters of the REVDNS and if not match add say 1/5 or so of HOLD > > weight. > > > > Thoughts, comments, boos, yahs, Go back to sleep (Can I Please?) > > > > John T > > eServices For You > > > > "Seek, and ye shall find!" > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
