Last month I receveived a REVDNS timeout on 4% of all my email. 85% of that
was spam.
It is certainly an obfuscation technique used by some static spammers.
----- Original Message -----
From: "Markus Gufler" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Monday, December 12, 2005 9:45 AM
Subject: RE: [Declude.JunkMail] REVDNS
Is a REVDNS-timeout such a frequent thing?
Markus
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Monday, December 12, 2005 4:31 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] REVDNS
Spamdomains tests do not trigger on a REVDNS Timeout.
----- Original Message -----
From: "Markus Gufler" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Monday, December 12, 2005 9:14 AM
Subject: RE: [Declude.JunkMail] REVDNS
> Thank you Scott,
>
> Serge, why do you use such a filter? A SpamDomain-Test
should do this even
> bether.
>
> Markus
>
>
>
>> -----Original Message-----
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On Behalf Of
Scott Fisher
>> Sent: Monday, December 12, 2005 3:58 PM
>> To: Declude.JunkMail@declude.com
>> Subject: Re: [Declude.JunkMail] REVDNS
>>
>> REVDNS 10 IS (Timeout)
>>
>> ----- Original Message -----
>> From: "Markus Gufler" <[EMAIL PROTECTED]>
>> To: <Declude.JunkMail@declude.com>
>> Sent: Monday, December 12, 2005 1:42 AM
>> Subject: RE: [Declude.JunkMail] REVDNS
>>
>>
>> >
>> >> I think it may be (timeout). I know Scott
>> >> Fisher posted a filter the other day that had the exact text
>> >> on what it is when rev dns times out.
>> >
>> > It was a message from Scott Fisher on the "cbl"-thread and
>> as I can see he
>> > posted a line
>> >
>> > TESTSFAILED 50 CONTAINS REVDNS-TIMEOUT
>> >
>> > So it would be interesting know what's exactly in his text
>> filter file
>> > "REVDNS-TIMEOUT"
>> >
>> > Markus
>> >
>> >
>> > ---
>> > [This E-mail was scanned for viruses by Declude EVA
www.declude.com]
>> >
>> > ---
>> > This E-mail came from the Declude.JunkMail mailing list. To
>> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> > type "unsubscribe Declude.JunkMail". The archives can be found
>> > at http://www.mail-archive.com.
>> >
>>
>> ---
>> [This E-mail was scanned for viruses by Declude EVA
www.declude.com]
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list. To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail". The archives can be found
>> at http://www.mail-archive.com.
>>
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
