Matt - what are you considering to be the return code for AHBL-DUL?
-Nick Hayer ---------- Original Message ---------------------------------- From: Matt <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Thu, 19 Feb 2004 18:45:26 -0500 >This only works with Pro versions of the 1.78 beta just released yesterday. > >It didn't take but a minute or so for this test to start adding some >significant points to E-mail on my system. The idea here is to give >extra points to messages that fail certain combinations of tests. XBL >and SPAMCOP are a great way to mark zombies, but they aren't on their >own reliable enough to delete on. On the other hand, a message that >fails SPAMDOMAINS and XBL, or NAJBL-DYNA and SPAMCOP is a near perfect >hit for zombie generated spam. In the very least this will push >messages from HOLD or (or below HOLD) to your DELETE range (or whatever >you might want to call your levels). > >The logic of this test in the default configuration is as follows: > > If ( > SPAMCOP and (XBL or SPAMDOMAINS or AHBL-DUL or NJABL-DUL or >NJABL-DYNA or SORBS-DUL or BASE64) or > XBL and (SPAMCOP or SPAMDOMAINS or AHBL-DUL or NJABL-DUL or >NJABL-DYNA or SORBS-DUL or BASE64) > ) > Then add 15 points. > >I actually have a few more tests configured on my system for the long >trail of OR operators. Be creative. Also, be sure that you check the >test names that I provided against the ones that you might be using on >your system, and of course make sure that everything is defined. > >You can download the newest version of ZOMBIE and other beta filters >from the following location: > > http://www.mailpure.com/software/decludefilters/beta/ > >Please return the favor and share with me any FP's that you see on this >test so that I can make adjustments for the benefit of myself as well as >others. > >Thanks, > >Matt > >-- >===================================================== >MailPure custom filters for Declude JunkMail Pro. >http://www.mailpure.com/software/ >===================================================== > > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
