----- Original Message ----- 
From: Dave Doherty

> What is the logic involved with these entries? INCLUDES? IS? ENDSWITH?
something else?

It's CONTAINS

> For example, if I include the following line in my SPAMDOMAINS file...
>
> msn.com hotmail.com
>
> ... which of the following messages would pass the test:
>
> from: [EMAIL PROTECTED]
> rdns: yadayada.scammsn.com (fail?)
Pass, because SPAMDOMAINS is based on CONTAINS, and the RDNS can contain
msn.com or hotmail.com, and this does contain msn.com
> rdns: yadayada.scamhotmail.com (fail?)
Pass, same reason
> rdns: yadayada.scam.msn.com (pass?)
Pass, same reason
> rdns: yadayada.scam.hotmail.com (pass?)
Pass, same reason
> rdns: yadayada.msn.com.phish.com (???)
Pass, same reason
> rdns: yadayada.hotmail.com.phish.com (???)
Pass, same reason

I have asked in the past that the SPAMDOMAINS test be changed to ENDSWITH,
but no such luck...

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to