[Declude.JunkMail] SpamDomain question

2004-04-18 Thread serge
Scott, where did spamdomain test get the Address of [EMAIL PROTECTED] ?
Also, for matt, how can we make your dynamic test detect this type of
dynamicIP in the helo and/or revdns ?


Received: from Dynamic-IP-cr20011850137.cable.net.co [200.118.50.137] by
mail.cefib.com
  (SMTPD32-8.05) id ADD4CF200D4; Mon, 19 Apr 2004 01:39:32 +
Received: from rwsuvw (c10-386-593.ftw.prodigy.net [207.24.184.179])
 by pop-2.qdw.att.net (8.12.8/8.12.8) with ESMTP id x3N5J5NM542104
 for [EMAIL PROTECTED]; Sun, 18 Apr 2004 21:39:31 -0500
Message-ID: [EMAIL PROTECTED]
Reply-To: Hattie Forrest [EMAIL PROTECTED]
From: Hattie Forrest [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [SpamIndex=33]Re: Card Declined, dasm app
Date: Sun, 18 Apr 2004 21:39:31 -0500
Organization: barbiturate
MIME-Version: 1.0
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-RBL-Warning: CBL: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=200.118.50.137;
X-RBL-Warning: SPAMCOP: Blocked - see
http://www.spamcop.net/bl.shtml?200.118.50.137;
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent
with spam [210f].
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command .
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'att.' found: Address of
[EMAIL PROTECTED] sent from invalid dynamic-ip-cr20011850137.cable.net.co.
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: Failed Foreign Filter
X-RBL-Warning: FIVETEN-SPAM: 137.50.118.200.blackholes.five-ten-sg.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SpamDomain question

2004-04-18 Thread Matt
Serge,

I'll answer both questions.

The From: address listed in the headers is only cosmetic.  Declude tests 
these things based on the MAILFROM address.  You can insert a line in 
your headers by placing the following code in your Global.CFG

   XSENDERON

As far as the DYNAMIC test detecting the REVDNS of this type, you can 
insert a line in the REVDNS Markers for Dynamic Ranges of ISP's 
section that says:

   REVDNS2STARTSWITHdynamic

As far as the HELO goes, Bob's new test can take care of this, but if 
you wanted to do it in Declude using a filter, you could take my DYNAMIC 
filter, delete all of the counterbalances, and then change all of the 
lines remaining from REVDNS to HELO.

Matt



serge wrote:

Scott, where did spamdomain test get the Address of [EMAIL PROTECTED] ?
Also, for matt, how can we make your dynamic test detect this type of
dynamicIP in the helo and/or revdns ?
Received: from Dynamic-IP-cr20011850137.cable.net.co [200.118.50.137] by
mail.cefib.com
 (SMTPD32-8.05) id ADD4CF200D4; Mon, 19 Apr 2004 01:39:32 +
Received: from rwsuvw (c10-386-593.ftw.prodigy.net [207.24.184.179])
by pop-2.qdw.att.net (8.12.8/8.12.8) with ESMTP id x3N5J5NM542104
for [EMAIL PROTECTED]; Sun, 18 Apr 2004 21:39:31 -0500
Message-ID: [EMAIL PROTECTED]
Reply-To: Hattie Forrest [EMAIL PROTECTED]
From: Hattie Forrest [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [SpamIndex=33]Re: Card Declined, dasm app
Date: Sun, 18 Apr 2004 21:39:31 -0500
Organization: barbiturate
MIME-Version: 1.0
Content-Type: text/html;
   charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-RBL-Warning: CBL: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=200.118.50.137;
X-RBL-Warning: SPAMCOP: Blocked - see
http://www.spamcop.net/bl.shtml?200.118.50.137;
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent
with spam [210f].
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command .
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'att.' found: Address of
[EMAIL PROTECTED] sent from invalid dynamic-ip-cr20011850137.cable.net.co.
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: Failed Foreign Filter
X-RBL-Warning: FIVETEN-SPAM: 137.50.118.200.blackholes.five-ten-sg.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
 

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.