We  recently  took  the  que  in  earlier  discussions  here  to begin
utilizing   negative  weights  in  the  filter  file  we  had  already
constructed  to  make  counter-weighing work. We are very pleased with
the  results. First we have just one file to edit that weighs possible
spam by rating MAILFROM, BODY, etc. but then we added to the same file
-100  or  -60  counter-weights  for  versions of these that are really
legitimate  sources.  The  whole  operation  is  simple as it is based
strictly  on weight and editing Declude rules to balance against black
lists  that  are  trapping legitimate emails.. works super and is very
easy  to  manage.  You  also  do  not  have  the  limitations of total
whitelisting entries associated with the global.cfg.

Spam weights, for example, look like:

MAILFROM 13 CONTAINS opt-in
MAILFROM 13 CONTAINS optitarget
MAILFROM 13 CONTAINS promo

Spam 'counterweights' look like:

MAILFROM -100 CONTAINS .classmates.com
MAILFROM -100 CONTAINS .rnc.org
MAILFROM -100 CONTAINS pcclub.com

--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com


----- Copy of Original Message(s): -----

>> One problem I see (Sandy and others, please jump in) is that whitelisting
J> is
J> easy to mess up, and a crack that the "law of unintended consequences" will
J> exploit.  Two examples: the example in Scott's manual that says whitelisting
J> mail.com is probably a bad idea, and whitelisting
J> postmaster@[yourdomainhere.tld] gives a free ride to any spam that sends to
J> postmaster while cc'ing everybody else at your domain.

J> I agree. The battle goes on.

J> John Tolmachoff MCSE, CSSA
J> IT Manager, Network Engineer
J> RelianceSoft, Inc.
J> Fullerton, CA  92835
J> www.reliancesoft.com

--
ActivatorMail(tm) ver.082302 Scanned for all viruses by 
www.activatormail.com intelligent anti-virus anti-spam service

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to