Keith wrote: >Would you post your configuration that works for you? and anyone else >that's willing to do so? I'd like to see some examples of successful >configurations to learn from.
Here's mine. Weights 0-12 are OK, weights 13-19 get bounced and 20+ gets deleted. Neither bounces nor deletes should be done without understanding *exactly* what the consequences are. While I get awfully close to zero false positives, I also wind up bouncing about 20% of the stuff declude bags. That works out to about 11000 bounce messages last month. Maybe a dozen actully reached a person. However those dozen would be angry customers wondering why their mail got deleted. Instead the bounce becomes a positive customer service. I need to experiment and see how many items hit weight 18, 17, 16 etc. to see if I can cut down on the bounces safely. I'll bet I can. You can see my latest stats here: http://mysecretbase.com/mailsystem.html. I also wrote up how the system works for customer information. What I'm describing is Declude Virus, Declude Junkmail and Imail 8 anti-spam working together. Hope this helps, -------------------------------------------- Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com -------------------------------------------- BLITZEDALL ip4r opm.blitzed.org * 2 0 CBL ip4r cbl.abuseat.org 127.0.0.2 3 0 COMPU ip4r blackhole.compu.net 127.0.0.4 3 0 DORKS ip4r orbs.dorkslayers.com 127.0.0.2 5 DSBL ip4r list.dsbl.org * 5 0 EASYNET-DNSBL ip4r blackholes.easynet.nl 127.0.0.2 5 0 EASYNET-PROXIES ip4r proxies.blackholes.easynet.nl * 2 0 FABEL ip4r spamsources.fabel.dk * 2 0 FIVETEN-SRC ip4r blackholes.five-ten-sg.com 127.0.0.2 2 0 FIVETEN-SPAMSUP ip4r blackholes.five-ten-sg.com 127.0.0.7 2 0 FIVETEN-MISC ip4r blackholes.five-ten-sg.com 127.0.0.9 2 0 FIVETEN-FREE ip4r blackholes.five-ten-sg.com 127.0.0.12 2 0 INTERSIL ip4r blackholes.intersil.net 127.0.0.2 5 0 IPWHOIS ip4r ipwhois.rfc-ignorant.org 127.0.0.6 3 0 LNSGSRC ip4r spamguard.leadmon.net 127.0.0.3 3 0 LNSGBULK ip4r spamguard.leadmon.net 127.0.0.4 3 0 LNSGOR ip4r spamguard.leadmon.net 127.0.0.5 3 0 LNSGMULTI ip4r spamguard.leadmon.net 127.0.0.6 3 0 LNSGBLOCK ip4r spamguard.leadmon.net 127.0.0.7 3 0 MONKEYFORMMAIL ip4r formmail.relays.monkeys.com * 3 0 MONKEYPROXIES ip4r proxies.relays.monkeys.com * 3 0 NJABL ip4r dnsbl.njabl.org 127.0.0.2 10 0 NJABLDUL ip4r dnsbl.njabl.org 127.0.0.3 50 0 ORDB ip4r relays.ordb.org * 5 0 SBL ip4r sbl.spamhaus.org 127.0.0.2 10 0 SORBS-HTTP ip4r dnsbl.sorbs.net 127.0.0.2 5 0 SORBS-SOCKS ip4r dnsbl.sorbs.net 127.0.0.3 5 0 SORBS-MISC ip4r dnsbl.sorbs.net 127.0.0.4 5 0 SORBS-SMTP ip4r dnsbl.sorbs.net 127.0.0.5 5 0 SORBS-SPAM ip4r dnsbl.sorbs.net 127.0.0.6 5 0 SORBS-WEB ip4r dnsbl.sorbs.net 127.0.0.7 5 0 SORBS-BLOCK ip4r dnsbl.sorbs.net 127.0.0.8 5 0 SORBS-ZOMBIE ip4r dnsbl.sorbs.net 127.0.0.9 10 0 SORBS-BADCONF ip4r dnsbl.sorbs.net 127.0.0.11 3 0 SORBS-NOMAIL ip4r dnsbl.sorbs.net 127.0.0.12 3 0 SPAMBAG ip4r blacklist.spambag.org * 10 0 SPAMCOP ip4r bl.spamcop.net 127.0.0.2 10 0 UCEB ip4r blackholes.uceb.org * 10 0 VOX ip4r vox.schpider.com 127.0.0.2 3 0 WIREHUB-DNSBL ip4r blackholes.wirehub.net 127.0.0.2 5 0 YBL ip4r ybl.megacity.org 127.0.0.2 5 0 DSN rhsbl dsn.rfc-ignorant.org 127.0.0.2 5 0 NOABUSE rhsbl abuse.rfc-ignorant.org 127.0.0.4 3 0 NOPOSTMASTER rhsbl postmaster.rfc-ignorant.org 127.0.0.3 3 0 SECURITYSAGE rhsbl blackhole.securitysage.com * 5 0 MAILPOLICE-BULK rhsbl bulk.rhs.mailpolice.com 127.0.0.2 5 0 MAILPOLICE-PORN rhsbl porn.rhs.mailpolice.com 127.0.0.2 5 0 BADHEADERS badheaders x x 8 0 HELOBOGUS helovalid x x 5 0 HEUR10 heuristics 10 x 3 0 IPNOTINMX ipnotinmx x x 0 -4 MAILFROM envfrom x x 12 0 PERCENT percent x x 10 0 REVDNS revdnsexists x x 5 0 ROUTING spamrouting x x 8 0 SPAMHEADERS spamheaders x x 5 0 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
