Re: [Declude.JunkMail] Spamdomains test

[Matt]

Using the dnsbl type of test and a custom zone, you could extend this through DNS.  For instance: MPBL-SPAMDOMAINS   dnsbl    %REVDNS%.%RHSBL%.spamdomains.example.com        127.0.0.2    4    0 In your custom zone, you could construct records like so: *.aol.com.aol.com                A      127.0.0.1                           TXT    ( "Good Entry" ) *.aol.com                        A      127.0.0.2                           TXT    ( "Bad Entry" ) I haven't yet tested this, but I believe that the wildcarding will work to give you the proper result.  Essentially you define a single bad entry, and then one good entry for every set of reverse DNS with Mail >From domain.  Unlike SPAMDOMAINS, this could accomodate more than two different reverse DNS domains.  The downside is that I don't know what it will do if Declude can't resolve a reverse DNS entry, or more accurately, what value will Declude use in place of the reverse DNS entry (this might be something to provide as an exception for each entry).  Alternatively, you could also use the %HELO% in combination with %RHSBL% since those don't need to do lookups.  Same thing goes for %IP4R% as well if you wish to do it in a fashion similar to SPF. Matt Sanford Whiteman wrote: So a line "example.com" would require that any E-mail address from @example.com must have a reverse DNS entry containing "example.com". However, if legitimate @example.com E-mail can also be sent from @example.net, then you could have a line "example.com example.net". Scott, any thoughts on my suggestion of an extended SPFDOMAINS test type with which you could manually maintain SPF-formatted policies for given domains, running the data through the existing SPF parser? --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================