I know the virus portion of Declude has been occupying much of your time, but I'd like to offer up some enhancement ideas for Junkmail.
1. I know this has been mentioned before: the ability to have a space in the filter. I'd like to filter (space)cialis. Rather than +10 cialis -10 specialist
We're still trying to figure out the best way to do this. Spaces work fine everywhere in the filter except as the first character (since spaces/tabs are used to delimit the information in the filter files). The problem is that there is no easy solution -- any solution will require a fair amount of programming/testing work and more complex implementation/documentation.
2. I'd like to see a third column added to the spamdomains test. Same function as the 2nd column, it would just give more flexibility.
We do hope to add the ability for a third (and more) columns to the spamdomains test.
3. How about an ISNOT test for the filters?
We do plan on adding this.
4. In regards to forged, non-existent domains or domains with no MX record, I see that an error message is put in the log:
WARNING: DNS server x.x.x.x returned a SERVER FAILURE error for MX or A for 775rgt.com.
Examining some of these, I see that these are SPAM from forged non-existent domains.
I wonder if this could be the basis for a new test?
Actually, that technically should only happen if your DNS server is broken. Unfortunately, though, the DNS RFCs don't specify how your DNS server should respond if the *other* DNS server reports a server failure -- so it may just be that the other DNS server is broken.
The problem here, though, is that the server failure often occurs with domains where something isn't set up properly -- it isn't uncommon to see it happen with legitimate domains.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
