Hi, If it's a zombie that's not listed anywhere, yet - then it may not matter much, if the weight is -3 or 0.
Also, the "zombie" will only benefit from SPF, if they take the time and are able to figure out which domain's SPF TXT record happens to cover that particular zombie IP. Just using any old domain name with an IP will not get credit, because SPF will not match. Best Regards Andy -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, January 16, 2004 12:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] AOL on SPAMCOP But what happens when it's not listed in SpamCop and some zombie sends out spam through it? It fixes one problem, but creates another. I currently see more spam coming from ISP mail servers than I see false positives, but of course that's just my setup. Having SpamCop FP on such a mail server though causes me great pause. Matt Andy Schmidt wrote: >Hi, > >Well, I simply use SPF PASS to assign a negative weight. Since AOL >implemented SPF, that automatically reduces any "SpamCop" effect to a >tolerable level, e.g., > >The following email had a weight of -13. Even if it was listed by >SPAMCOP it would have been less than 0. > > X-Declude: Triggered AHBLEXEMPT, SPFPASS [-13] > >Received: from imo-d04.mx.aol.com [205.188.157.36] by hm-software.com >with ESMTP > (SMTPD32-7.07) id AF6F1966002E; Mon, 12 Jan 2004 17:27:59 -0500 >Received: from [EMAIL PROTECTED] > by imo-d04.mx.aol.com (mail_out_v36_r4.8.) id 5.10.3a7e0015 (30960) > for <[EMAIL PROTECTED]>; Mon, 12 Jan 2004 17:27:52 -0500 (EST) >From: [EMAIL PROTECTED] >Message-ID: <[EMAIL PROTECTED]> >Date: Mon, 12 Jan 2004 17:27:52 EST >Subject: (no subject) >To: [EMAIL PROTECTED] >MIME-Version: 1.0 >Content-Type: multipart/alternative; >boundary="-----------------------------1073946471" >X-Mailer: 9.0 for Windows sub 5100 >X-Declude: Version 1.77i8; D1f6f1966002e6052.SMD from >imo-d04.mx.aol.com [205.188.157.36] >X-Declude: Triggered AHBLEXEMPT, SPFPASS [-13] >X-Countries: UNITED STATES->destination >Return-Path: <[EMAIL PROTECTED]> >X-Declude-Date: 01/12/2004 22:27:52 [0] >X-RCPT-TO: <[EMAIL PROTECTED]> >Status: U >X-UIDL: 353600159 > > > >Best Regards >Andy Schmidt > >H&M Systems Software, Inc. >600 East Crescent Avenue, Suite 203 >Upper Saddle River, NJ 07458-1846 > >Phone: +1 201 934-3414 x20 (Business) >Fax: +1 201 934-9206 > >http://www.HM-Software.com/ > > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >"unsubscribe Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > > > > -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
