Yes, I have noticed this already. I've only been using Declude (or any spam filter for that matter) for a week or so now. Still working on getting my weights set properly so-as to block more spam yet prevent false-positives. Thanks for then tip on unknown.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Sunday, September 12, 2004 8:03 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPF tests not working right? Syntax looks correct. Fail looks at the SPF record for the domain being checked and if it says mail should not be sent from that domains from the mail server in question, then the test will fail. For the case where the domain does not have an SPF record, the test would return Unknown. If you want to show that result you can add SPFUNKNOWN spf unknown x 0 0 SPFUNKNOWN WARN Also note that giving much, or perhaps any, weight to SPF PASS may not be a good idea as some spammers have added SPF records. Darin. ----- Original Message ----- From: "Matthew Hiltner: oliveJar Support" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, September 12, 2004 2:42 AM Subject: [Declude.JunkMail] SPF tests not working right? in my GLOBAL file, the tests are defines as follows: SPFPASS spf pass x -5 0 SPFFAIL spf fail x 8 0 In $default$ SPFPASS warn SPFFAIL warn My problem is, while I do get several successful "pass" results, I have yet to get a fail result. How exactly is this test carried out? Is it checking for the validity of the SPF record, and if one does not exist, the test is skipped? Or should a mail fail if either the record is inaccurate OR if the record does not exist? Or do I have something configured wrong? From scanning the archives I believe that I do have the tests configured properly. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.