Publishing your whitelists on public forum is a very bad idea.  Spammers
monitor these lists and now know that if they send anything to your mail
server with one of the from addresses you've listed below, your server will
pass these message on without doing any spam filtering.

Frankly, I don't recommend that anyone that is using Declude JunkMail
anything but trusted IP address.  Using filters with Declude JM is a much
better option when dealing with e-mail addresses that you want to help pass
spam filters by applying a negative weight to the message.  That way you
still spam filter the messages, but lessen the weight to help pass
legitimate messages (however, I still would recommend never publishing these
e-mail addresses on a public lists).

Bill
----- Original Message ----- 
From: "andyb" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, June 02, 2003 9:59 AM
Subject: [IMail Forum] yahoo as spam


> Hi,
>
> I have a customer, she is sending email from her yahoo account to her
email
> address here.  It is being caught as spam, as per included log entries.
>
> Good ole yahoo, not RFC compliant as the postmaster and abuse email
> addresses.
>
> I have also included my config files.  This config has worked very well in
> the past, almost no false positives and catching approx 85% of all spam.
> Comments for improvement, please.
>
> Thanks, Andy
>
>
> 06/02/2003 05:51:08 Q1e0a290 FIVETENSRC:5 NOPOSTMASTER:3 NOABUSE:2 .
Total
> weight = 10
> 06/02/2003 05:51:08 Q1e0a290 Msg failed FIVETENSRC
> (184.129.136.216.blackholes.five-ten-sg.com.). Action=IGNORE.
> 06/02/2003 05:51:08 Q1e0a290 Msg failed NOPOSTMASTER (Not supporting
> [EMAIL PROTECTED]). Action=IGNORE.
> 06/02/2003 05:51:08 Q1e0a290 Msg failed NOABUSE (Not supporting
> [EMAIL PROTECTED]). Action=IGNORE.
> 06/02/2003 05:51:08 Q1e0a290 Msg failed WEIGHT10 (Weight of 10 reaches or
> exceeds the limit of 10.). Action=HOLD.
> 06/02/2003 05:51:08 Q1e0a290 Subject: Fwd: RE: Ed Tech Day / Joyce Carol
> Oates
> 06/02/2003 05:51:08 Q1e0a290 From: [EMAIL PROTECTED] To:
> [EMAIL PROTECTED]
>
>
> $default$.junkmail
>
> BLACKLIST         DELETE
> OSDUL           HOLD
> OSSOFT          HOLD
> ORDB            HOLD
> SPAMCOP         HOLD
> ZONEIN          HOLD
> MAILFROM        HOLD
> SPAMROUTING     HOLD
> PERCENT         HOLD
> WEIGHT10        HOLD
>
> # Global.cfg:   Declude JunkMail configuration file
>
> CODE  XXXXXXX
>
> LOGFILE         D:\Imail\spool\spam####.log
> LOGLEVEL        MID
> LOG_OK          NONE
> HOP             0
>
> DNS             216.153.138.61
>
> CONSOLE OFF
> IPBYPASS        216.153.138.61  # NS1_Thumper
>
> XSENDER         ON
> XSPOOLNAME      ON
> XINHEADER       X-Note: Checked for SPAM and Viruses by Thumpernet -
> http://www.thumpernet.com
> XINHEADER X-note: Total spam weight of the emai is %WEIGHT%
> XOUTHEADER      X-Note: Please send abuse reports to [EMAIL PROTECTED]
>
> BLACKLIST      fromfile   d:\imail\declude\blacklist.txt
>
> OSRELAY         ip4r    relays.osirusoft.com            127.0.0.2       2
> 0
> OSDUL           ip4r    relays.osirusoft.com            127.0.0.3
> OSSRC           ip4r    relays.osirusoft.com            127.0.0.4 5 0
> OSSOFT          ip4r    relays.osirusoft.com            127.0.0.6
> OSLIST          ip4r    relays.osirusoft.com            127.0.0.7       3
> 0
> SPAMCOP  ip4r     bl.spamcop.net   127.0.0.2
>
> FIVETENSRC      ip4r    blackholes.five-ten-sg.com      127.0.0.2       5
> 0
> FIVETENDUL      ip4r    blackholes.five-ten-sg.com      127.0.0.3       5
> 0
> FIVETENOPTIN    ip4r    blackholes.five-ten-sg.com      127.0.0.4       3
> 0
> FIVETENOTHER    ip4r    blackholes.five-ten-sg.com      127.0.0.5       5
> 0
>
> DSN             rhsbl   dsn.rfc-ignorant.org            127.0.0.2       2
> 0
> NOPOSTMASTER    rhsbl   postmaster.rfc-ignorant.org     127.0.0.3       3
> 0
> NOABUSE         rhsbl   abuse.rfc-ignorant.org          127.0.0.4       2
> 0
>
> MAILFROM        envfrom
> BADHEADERS      badheaders      x       x       4       0
> SPAMHEADERS     spamheaders     x       x       4       0
> SPAMROUTING     spamrouting
> HEUR10          heuristics      10      x       5       0
> PERCENT         percent
>
> WEIGHT10        weight          x       x       10      0
>
> WHITELIST FROM [EMAIL PROTECTED]
> WHITELIST FROM @MAILER-DAEMONitrogen.packetcity.com
> WHITELIST  TO [EMAIL PROTECTED]
> WHITELIST TO [EMAIL PROTECTED]
> WHITELIST       IP      216.153.138.    # Anything from our address space
> WHITELIST FROM    @go2france.com
> WHITELIST       FROM    @mail.go2france.com
> WHITELIST       FROM    @list.ipswitch.com
> WHITELIST       FROM    @declude.com
> WHITELIST       FROM    @signup.universalstudios.com   #For JGL 1/4/02
> WHITELIST FROM @listserv.usairways.com   #For Rita 1/4/02
> WHITELIST FROM    @centro.org   #for [EMAIL PROTECTED] 1/7/02
> WHITELIST FROM @upstate.edu   #for lisa b 2/5/02
> WHITELIST FROM @listsrv02.usairways.com
> WHITELIST FROM @registrars.com
> WHITELIST FROM @hammond-irving.com  #reported to spamcop
> WHITELIST FROM @hillside.com   #Peg 02/12/02
> WHITELIST FROM [EMAIL PROTECTED] #Peg 02/22/02
> WHITELIST FROM @youngliving.com  #Peg 02/27/02
> WHITELIST FROM @irco.com   #Peg 03/06/02
> WHITELIST FROM @TerritoryMortgage.com  #Peg 04/04/02
> WHITELIST FROM @territoryloan.com  #Peg 05/30/02
> WHITELIST FROM @skf.com   #Peg 06/12/02
> WHITELIST FROM @paypal.com   #Peg 07/10/02
> WHITELIST FROM [EMAIL PROTECTED]  #Peg 08/08/02
> WHITELIST  FROM @usa.redcross.org  #Peg 08/19/02
> WHITELIST FROM [EMAIL PROTECTED]  #Peg 09/19/02
> WHITELIST FROM [EMAIL PROTECTED]  #for k O'Hara 1/6/03
>
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to