A lot of spam comes with valid SPF pass configurations (but so does legitimate). However, if someone is sophisticated enough to set up SPF for their domain, they should also be sophisticated enough to have valid Reverse DNS and Hostnames configured. So I'm experimenting with this filter that will ADD weight if SPFPASS and if the Reverse DNS or Hostname are bad: SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED END NOTCONTAINS SPFPASS TESTSFAILED 2 CONTAINS REVDNS TESTSFAILED 2 CONTAINS HELOBOGUS --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.