On Fri, 05 Jun 2009 14:05:40 -0400 Rob McEwen <r...@invaluement.com> wrote:
> An occassional legit e-mail will have RDNS_NONE, and an occassional > legit e-mail will have RCVD_IN_PBL. But even extreme fewer legit > emails will have hits on BOTH of these. So I'd suggest scoring the > combination of the two either just above threshold, or (at the > least...) just below threshold. You need to be a little careful about that if you have an extended internal network outside your control. Not all servers record rnds and authentication.
