Thanks - I will create a local.txt and test it out.

REVDNS          15      PCRE    (?i:\.in\.net$)
MAILFROM                15      PCRE    (?i:\.in\.net$)
HELO                    15      PCRE    (?i:\.in\.net$)
BODY                    10      PCRE    
(?i:https?:\/\/([-A-Z0-9.])+\.in\.net[\/n\s])

Tina Cline 
270net Technologies 
IT Support Specialist
Phone: 301.663.6000 x200



-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of David Barker
Sent: Friday, September 25, 2015 10:39 AM
To: [email protected]
Subject: [MBF] Re: PRE-TESTED question

Correction (?i:\.in.net$) should read (?i:\.in\.net$)

David Barker
Mail’s Best Friend
Email     : [email protected]
Web      : www.mailsbestfriend.com
Office    : 866.919.2075



-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of David Barker
Sent: Friday, September 25, 2015 10:29 AM
To: [email protected]
Subject: [MBF] Re: PRE-TESTED question

I assume you are seeing a lot of .in.net as spam. My suggestion would be to put 
it in a filter that is on your server as the PRE-TESTED affects everyone. If 
you have a LOCAL.txt filter use that if not create one. The entry/s would be:

REVDNS          15      PCRE    (?i:\.in.net$)
MAILFROM                15      PCRE    (?i:\.in.net$)
HELO                    15      PCRE    (?i:\.in.net$)
BODY                    10      PCRE    
(?i:https?:\/\/([-A-Z0-9.])+\.in\.net[\/n\s])

David Barker
Mail’s Best Friend
Email     : [email protected]
Web      : www.mailsbestfriend.com
Office    : 866.919.2075



-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Tina Cline
Sent: Friday, September 25, 2015 9:56 AM
To: [email protected]
Subject: [MBF] Re: PRE-TESTED question

In the PRE-TESTED file, are we able to include TLDs such as ".in.net"  I don't 
want to put weight on .net domains, but I do on domains ending with ".in.net"

Tina Cline
270net Technologies
IT Support Specialist
Phone: 301.663.6000 x200


-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of David Barker
Sent: Wednesday, November 12, 2014 8:42 PM
To: [email protected]
Subject: [MBF] Re: PRE-TESTED question

The sub-domain, is a key identifier for pre-tested spam.  If this is a 
false positive I would suggest to whitelist the email.   I am surpirsed 
it only triggered this test What date is you PRE-TESTED file?

David

On 11/12/2014 6:57 PM, Scott Jibben wrote:
> Hello,
>
> I've noticed that some mail is getting routed to junk mail using the 
> newer PRE-TESTED filter.
>
> MAILFROM    20    PCRE 
> (?i:@([a-z0-9-_]{5,25}\.[a-z0-9]+(?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?
> :[a-z0-9-]*[a-z0-9])?)
>
> From: "WhenToWork.com" <[email protected]>
>
> X-Declude-Fail: SPFPASS [-1], PRE-TESTED [20], WEIGHT5 [5], WEIGHT7 
> [7], WEIGHT10 [10], WEIGHT14 [14], WEIGHT15 [15]
>
> This is legitimate email.
>
> I'm not a RegEx expert.  Is it failing because the mail is coming in 
> from a sub-domain in the email address?  Is it failing because of the 
> uppercase letters in the from email address?  Some other reason?
>
> Thanks,
> Scott Jibben
>
>
>
> #############################################################
> This message is sent to you because you are subscribed to  the mailing 
> list <[email protected]>.
> To unsubscribe, E-mail to: <[email protected]>
> To switch to the DIGEST mode, E-mail to 
> <[email protected]>
> To switch to the INDEX mode, E-mail to 
> <[email protected]>
> Send administrative queries to <[email protected]>
>

--
David Barker
Mail’s Best Friend
Email     : [email protected]
Web      :  www.mailsbestfriend.com
Office    :  866.919.2075
Mobile  :  978.518.6461


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>


         
#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>



#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>


         
#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[email protected]>
To switch to the DIGEST mode, E-mail to <[email protected]>
To switch to the INDEX mode, E-mail to <[email protected]>
Send administrative queries to  <[email protected]>

Reply via email to