Yes... Like a filter file:
REVDNS -20 ENDSWITH .amazon.com I put the period before Amazon to just make sure no funky domain like .spamamazon.com can get through. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Friday, December 05, 2003 10:39 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPAMCOP Having Legit IP Addresses Kami: I've been taking a look at your configuration files every few weeks and based on what I saw there a couple of months ago, I also started WHITELISTing based on Reverse DNS and HELO a few months back. So there's probably many I'm not seeing as flagged by SPAMCOP because of the whitelist. It just so happened that the 3 I listed had not been whitelisted. I know that whitelisting will fix the problems but I also know that there's is definitely something up with SPAMCOP. Am I correct that you can only add 100 WHITELIST entries to the GLOBAL.CFG file? Is that 100 each for REVDNS and HELO or 100 total? Is there anyway to go past that limit and/or else offload those into a separate file? How do you do the negative Reverse DNS entries? Is that just by using the FILTER test? Thanks, Dan ----- Original Message ----- From: "Kami Razvan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 05, 2003 10:24 AM Subject: RE: [Declude.JunkMail] SPAMCOP Having Legit IP Addresses > Dan: > > We made a decision a long time ago to whitelist REVDNS of all the folks you > had listed. > > We now have two REVDNS negative files. > > 1: Whitelist as entered in the Global.cfg (I only hope one day Scott moves > these entries to their own files). > > 2: Negative reverseDNS files that adds negative weight to the ones that are > legitimate and used by our users. > > That took care of a lot of problems.. > > Regards, > Kami > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser > Sent: Friday, December 05, 2003 10:10 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] SPAMCOP Having Legit IP Addresses > > Hello, All, > Has anyone noticed in the last few days that the IP addresses of a lot of > legitimate e-mailers are showing up on SPAMCOP's blocklists? Specifically > I've seen IP addresses for NYTIMES.COM, MICROSOFT.COM and MACROMEDIA.COM and > a few others. Does anyone think it's possible that SPAMCOP's databases are > being gamed by Spammers by submitting lots of e-mails with legit IP > addresses and pretend that they came across as spam? Or maybe there are > uninformed SPAMCOP users who are submitting legit e-mail to SPAMCOP as > representative of spam? Or even that IronPort's purchase of SPAMCOP has > somehow affected the way that they do things? > > Just curious. These legit IPs showing up on SPAMCOP are really throwing > lots of False Positives in my weighting system. > > Thanks, > Dan > [EMAIL PROTECTED] > > ----------------------------------------------------------------------- > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > http://www.nexustechgroup.com/mailscan > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > ----------------------------------------------------------------------- > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > http://www.nexustechgroup.com/mailscan > > ----------------------------------------------------------------------- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
