I'll answer both questions.
The From: address listed in the headers is only cosmetic. Declude tests these things based on the MAILFROM address. You can insert a line in your headers by placing the following code in your Global.CFG
XSENDER ON
As far as the DYNAMIC test detecting the REVDNS of this type, you can insert a line in the "REVDNS Markers for Dynamic Ranges of ISP's" section that says:
REVDNS 2 STARTSWITH dynamic
As far as the HELO goes, Bob's new test can take care of this, but if you wanted to do it in Declude using a filter, you could take my DYNAMIC filter, delete all of the counterbalances, and then change all of the lines remaining from REVDNS to HELO.
Matt
serge wrote:
Scott, where did spamdomain test get the Address of [EMAIL PROTECTED] ? Also, for matt, how can we make your dynamic test detect this type of dynamicIP in the helo and/or revdns ?
Received: from Dynamic-IP-cr20011850137.cable.net.co [200.118.50.137] by mail.cefib.com (SMTPD32-8.05) id ADD4CF200D4; Mon, 19 Apr 2004 01:39:32 +0000 Received: from rwsuvw (c10-386-593.ftw.prodigy.net [207.24.184.179]) by pop-2.qdw.att.net (8.12.8/8.12.8) with ESMTP id x3N5J5NM542104 for <[EMAIL PROTECTED]>; Sun, 18 Apr 2004 21:39:31 -0500 Message-ID: <[EMAIL PROTECTED]> Reply-To: "Hattie Forrest" <[EMAIL PROTECTED]> From: "Hattie Forrest" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: [SpamIndex=33]Re: Card Declined, dasm app Date: Sun, 18 Apr 2004 21:39:31 -0500 Organization: barbiturate MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-RBL-Warning: CBL: "Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=200.118.50.137"; X-RBL-Warning: SPAMCOP: "Blocked - see http://www.spamcop.net/bl.shtml?200.118.50.137"; X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [2000010f]. X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command . X-RBL-Warning: SPAMDOMAINS: Spamdomain 'att.' found: Address of [EMAIL PROTECTED] sent from invalid dynamic-ip-cr20011850137.cable.net.co. X-RBL-Warning: IPNOTINMX: X-RBL-Warning: Failed Foreign Filter X-RBL-Warning: FIVETEN-SPAM: 137.50.118.200.blackholes.five-ten-sg.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
