Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion
Thanks, Bill. I add my vote for ENDSWITH... -d - Original Message - From: "Bill Landry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 16, 2004 2:15 AM Subject: Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion > - Original Message - > From: Dave Doherty > > > What is the logic involved with these entries? INCLUDES? IS? ENDSWITH? > something else? > > It's CONTAINS > > > For example, if I include the following line in my SPAMDOMAINS file... > > > > msn.com hotmail.com > > > > ... which of the following messages would pass the test: > > > > from: [EMAIL PROTECTED] > > rdns: yadayada.scammsn.com (fail?) > Pass, because SPAMDOMAINS is based on CONTAINS, and the RDNS can contain > msn.com or hotmail.com, and this does contain msn.com > > rdns: yadayada.scamhotmail.com (fail?) > Pass, same reason > > rdns: yadayada.scam.msn.com (pass?) > Pass, same reason > > rdns: yadayada.scam.hotmail.com (pass?) > Pass, same reason > > rdns: yadayada.msn.com.phish.com (???) > Pass, same reason > > rdns: yadayada.hotmail.com.phish.com (???) > Pass, same reason > > I have asked in the past that the SPAMDOMAINS test be changed to ENDSWITH, > but no such luck... > > Bill > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion
- Original Message - From: Dave Doherty > What is the logic involved with these entries? INCLUDES? IS? ENDSWITH? something else? It's CONTAINS > For example, if I include the following line in my SPAMDOMAINS file... > > msn.com hotmail.com > > ... which of the following messages would pass the test: > > from: [EMAIL PROTECTED] > rdns: yadayada.scammsn.com (fail?) Pass, because SPAMDOMAINS is based on CONTAINS, and the RDNS can contain msn.com or hotmail.com, and this does contain msn.com > rdns: yadayada.scamhotmail.com (fail?) Pass, same reason > rdns: yadayada.scam.msn.com (pass?) Pass, same reason > rdns: yadayada.scam.hotmail.com (pass?) Pass, same reason > rdns: yadayada.msn.com.phish.com (???) Pass, same reason > rdns: yadayada.hotmail.com.phish.com (???) Pass, same reason I have asked in the past that the SPAMDOMAINS test be changed to ENDSWITH, but no such luck... Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion
Well, maybe not so quick after all... A follow-on question: What is the logic involved with these entries? INCLUDES? IS? ENDSWITH? something else? For example, if I include the following line in my SPAMDOMAINS file... msn.com hotmail.com ... which of the following messages would pass the test: from: [EMAIL PROTECTED] rdns: yadayada.scammsn.com (fail?) rdns: yadayada.scamhotmail.com (fail?)rdns: yadayada.scam.msn.com (pass?) rdns: yadayada.scam.hotmail.com (pass?) rdns: yadayada.msn.com.phish.com (???) rdns: yadayada.hotmail.com.phish.com (???) -Dave Doherty Skywaves, Inc. - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 04, 2004 10:42 AM Subject: Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion > > >If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS, knwoing> >that at least some msn.com mail is actually transmitted by hotmail.com> >servers, how should I set up SPAMDOMAINS to allow both domains?> >> >msn.com> >msn.com hotmail.com> > If you just use the second line, you'll be fine (do not use both, though, > as an E-mail that fails the first one would fail the test, even if it > passes the second line).> > -Scott> ---> Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000.> Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection.> Find out what you've been missing: Ask for a free 30-day evaluation.> > ---> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]> > ---> This E-mail came from the Declude.JunkMail mailing list. To> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and> type "unsubscribe Declude.JunkMail". The archives can be found> at http://www.mail-archive.com.> >
Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion
Thanks, Scott. -d - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 04, 2004 10:42 AM Subject: Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion > > >If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS, knwoing > >that at least some msn.com mail is actually transmitted by hotmail.com > >servers, how should I set up SPAMDOMAINS to allow both domains? > > > >msn.com > >msn.comhotmail.com > > If you just use the second line, you'll be fine (do not use both, though, > as an E-mail that fails the first one would fail the test, even if it > passes the second line). > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Quick SPAMDOMAINS Questuion
If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS, knwoing that at least some msn.com mail is actually transmitted by hotmail.com servers, how should I set up SPAMDOMAINS to allow both domains? msn.com msn.comhotmail.com If you just use the second line, you'll be fine (do not use both, though, as an E-mail that fails the first one would fail the test, even if it passes the second line). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Quick SPAMDOMAINS Questuion
If I want to allow mail from [EMAIL PROTECTED] to pass SPAMDOMAINS, knwoing that at least some msn.com mail is actually transmitted by hotmail.com servers, how should I set up SPAMDOMAINS to allow both domains? msn.com msn.comhotmail.com ??? -Dave --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.