Jdow said: >>"I have found, in general, that whitelisting mailing lists >>is not a very good idea" ... "I also find spams appear >>on unmoderated Yahoo Groups." ... "a blanket white list of >>the sort you propose would likely turn me white with anger"...
Thanks for the reply... but that is why I said in my original post: >>"but without whitelisting other real spam" Also, I'm more worried about SURBL (& other URI checker) hits on these than rules hits. Still, do you find such spam coming from those lists which are 100% opt-in? If Yahoo 100% opt-in? For the spam from Yahoo, is there a pattern? For example, I find that the greatest risk for FPs are those instances where the list saves up a day's worth of posts and then sends all of it in one e-mail. Therefore, maybe a rule which considered ALL of the following would work: (1) sending server's IP (2) MAILFROM (3) size of the e-mail (maybe not including attachments), and (4) > X number of e-mail addresses found in the body of the message. Perhaps this kind of rule could whitelist the messages at highest risk of being a FP message without whitelisting the occasional list spam? Rob McEwen
