Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion

2004-08-17 Thread Dave Doherty
Thanks, Bill.

I add my vote for ENDSWITH...

-d


- Original Message - 
From: "Bill Landry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 16, 2004 2:15 AM
Subject: Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion


> - Original Message - 
> From: Dave Doherty
>
> > What is the logic involved with these entries? INCLUDES? IS? ENDSWITH?
> something else?
>
> It's CONTAINS
>
> > For example, if I include the following line in my SPAMDOMAINS file...
> >
> > msn.com hotmail.com
> >
> > ... which of the following messages would pass the test:
> >
> > from: [EMAIL PROTECTED]
> > rdns: yadayada.scammsn.com (fail?)
> Pass, because SPAMDOMAINS is based on CONTAINS, and the RDNS can contain
> msn.com or hotmail.com, and this does contain msn.com
> > rdns: yadayada.scamhotmail.com (fail?)
> Pass, same reason
> > rdns: yadayada.scam.msn.com (pass?)
> Pass, same reason
> > rdns: yadayada.scam.hotmail.com (pass?)
> Pass, same reason
> > rdns: yadayada.msn.com.phish.com (???)
> Pass, same reason
> > rdns: yadayada.hotmail.com.phish.com (???)
> Pass, same reason
>
> I have asked in the past that the SPAMDOMAINS test be changed to ENDSWITH,
> but no such luck...
>
> Bill
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion

2004-08-15 Thread Bill Landry
- Original Message - 
From: Dave Doherty

> What is the logic involved with these entries? INCLUDES? IS? ENDSWITH?
something else?

It's CONTAINS

> For example, if I include the following line in my SPAMDOMAINS file...
>
> msn.com hotmail.com
>
> ... which of the following messages would pass the test:
>
> from: [EMAIL PROTECTED]
> rdns: yadayada.scammsn.com (fail?)
Pass, because SPAMDOMAINS is based on CONTAINS, and the RDNS can contain
msn.com or hotmail.com, and this does contain msn.com
> rdns: yadayada.scamhotmail.com (fail?)
Pass, same reason
> rdns: yadayada.scam.msn.com (pass?)
Pass, same reason
> rdns: yadayada.scam.hotmail.com (pass?)
Pass, same reason
> rdns: yadayada.msn.com.phish.com (???)
Pass, same reason
> rdns: yadayada.hotmail.com.phish.com (???)
Pass, same reason

I have asked in the past that the SPAMDOMAINS test be changed to ENDSWITH,
but no such luck...

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion

2004-08-15 Thread Dave Doherty



Well, maybe not so quick after 
all...
 
A follow-on question:
 
What is the logic involved with these 
entries? INCLUDES? IS? ENDSWITH? something else?
 
For example, if I include the following 
line in my SPAMDOMAINS file...
 
msn.com 
hotmail.com
 
... which of the following 
messages would pass the test:
 

from: [EMAIL PROTECTED]
rdns: 
yadayada.scammsn.com (fail?)
rdns: 
yadayada.scamhotmail.com (fail?)rdns: 
yadayada.scam.msn.com (pass?)


rdns: 
yadayada.scam.hotmail.com (pass?)

rdns: 
yadayada.msn.com.phish.com (???)
rdns: 
yadayada.hotmail.com.phish.com 
(???)
 
-Dave Doherty
 Skywaves, Inc.
 
- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 04, 2004 10:42 
AM
Subject: Re: [Declude.JunkMail] Quick 
SPAMDOMAINS Questuion
> > >If I want to allow mail from 
[EMAIL PROTECTED] to pass 
SPAMDOMAINS, knwoing> >that at least some msn.com mail is actually 
transmitted by hotmail.com> >servers, how should I set up SPAMDOMAINS 
to allow both domains?> >> >msn.com> 
>msn.com    hotmail.com> > If you just use the 
second line, you'll be fine (do not use both, though, > as an E-mail that 
fails the first one would fail the test, even if it > passes the second 
line).> > 
    
-Scott> ---> Declude JunkMail: The advanced anti-spam solution for 
IMail mailservers > since 2000.> Declude Virus: Ultra reliable 
virus detection and the leader in mailserver > vulnerability 
detection.> Find out what you've been missing: Ask for a free 30-day 
evaluation.> > ---> [This E-mail was scanned for viruses by 
Declude Virus (http://www.declude.com)]> > ---> This E-mail came 
from the Declude.JunkMail mailing list.  To> unsubscribe, just send 
an E-mail to [EMAIL PROTECTED], and> type "unsubscribe 
Declude.JunkMail".  The archives can be found> at http://www.mail-archive.com.> > 


Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion

2004-06-04 Thread Dave Doherty
Thanks, Scott.

-d


- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 04, 2004 10:42 AM
Subject: Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion


>
> >If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS,
knwoing
> >that at least some msn.com mail is actually transmitted by hotmail.com
> >servers, how should I set up SPAMDOMAINS to allow both domains?
> >
> >msn.com
> >msn.comhotmail.com
>
> If you just use the second line, you'll be fine (do not use both, though,
> as an E-mail that fails the first one would fail the test, even if it
> passes the second line).
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers
> since 2000.
> Declude Virus: Ultra reliable virus detection and the leader in mailserver
> vulnerability detection.
> Find out what you've been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion

2004-06-04 Thread R. Scott Perry

If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS, knwoing
that at least some msn.com mail is actually transmitted by hotmail.com
servers, how should I set up SPAMDOMAINS to allow both domains?
msn.com
msn.comhotmail.com
If you just use the second line, you'll be fine (do not use both, though, 
as an E-mail that fails the first one would fail the test, even if it 
passes the second line).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Quick SPAMDOMAINS Questuion

2004-06-04 Thread Dave Doherty
If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS, knwoing
that at least some msn.com mail is actually transmitted by hotmail.com
servers, how should I set up SPAMDOMAINS to allow both domains?

msn.com
msn.comhotmail.com

???

-Dave


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.