Sunday, March 30, 2003, 6:17:35 PM, [EMAIL PROTECTED] wrote: > Anyone here using IMGate to provide spam filtering for paying Internet > customers? I'm looking for some guidance on what should be changed in > IMGate to help make it less likely to get false positives.
Find the right RBLs and header/body checks that don't give too many false positives. For example, here's what we use for RBLs: blackholes.wirehub.net dnsbl.njabl.org list.dsbl.org relays.ordb.org dynablock.wirehub.net proxies.relays.monkeys.com orbs.dorkslayers.com relays.visi.com opm.blitzed.org For body/header checks we reject on the following extensions (including nested extensions up to six levels deep): (exe|msi|pif|com|vbs|scr|dll|lnk|hta|vbe|js|jse|bat|vxd|shm) Also in the header/body checks are blocks for commonly used virus subjects and commonly used spam mailers. With these I get about one reported false positive a month for the twenty or so domains currently using that server. -- Chris Scott Host Orlando, Inc. http://www.hostorlando.com/
