I would add country weight as well. There used to be examples that work. I
actually weight yahoo.com.XX as well.
At 01:20 PM 2/10/2009 -0500, Pete McNeil wrote:
>>>>
Robert Grosshandler wrote:
Sounds like a spam headline, doesnt it?
Anyway, were getting obvious spam, but were not able to weight it enough
to block it. Any tests you might suggest. The following came to us BCCd,
I believe. Nothing about it was appropriate for us.
<snip/>
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 60.
X-Declude-Sender: <mailto:scp...@yahoo.com.ar>scp...@yahoo.com.ar
[173.15.150.165]
X-Declude-Spoolname: Dccef01a20000279a.smd
X-Declude-RefID: str=0001.0A010203.498BCCF8.0197,ss=1,fgs=0
X-Declude-Scan: Incoming Score [11] at 23:39:07 on 05 Feb 2009
X-Declude-Fail: UCEPROTECT-1 [4], SNIFFER [12], WEIGHT9 [9], WEIGHTMID
[10], ZEROHOUR [0]
I'm biased, but you might increase the weight you add for SNF -- I note it
did fail the message.
Most systems seem to weight SNF so that SNF + any other test will hold a
message.
Many hold on SNF alone.
Given that general practice, adding weight to SNF might solve this problem
for you.
_M
-----
This information is intended only for the use of the individual or
entity named above.
If you are not the intended recipient, you are hereby notified that
any disclosure, copying, distribution, or action taken in reliance
on the contents of these documents is strictly prohibited. If you
have received this information in error, please notify the sender
immediately and arrange for the return or destruction of the
document(s).
Warning: All e-mail sent to or from this address will be received or
otherwise recorded by the Corporate e-mail system and is subject to
archival, monitoring or review by, and/or disclosure to, someone other
than the recipient.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
<<<<
-----
This information is intended only for the use of the individual or
entity named above.
If you are not the intended recipient, you are hereby notified that
any disclosure, copying, distribution, or action taken in reliance
on the contents of these documents is strictly prohibited. If you
have received this information in error, please notify the sender
immediately and arrange for the return or destruction of the
document(s).
Warning: All e-mail sent to or from this address will be received or
otherwise recorded by the Corporate e-mail system and is subject to
archival, monitoring or review by, and/or disclosure to, someone other
than the recipient.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
