I use a variant of Matt's badcountrynorevdns test to punish timeout's from spam haven countries:

BadCountryREVDNSTimeout.txt:
REVDNS  END NOTIS  (Timeout)

COUNTRY  50 IS  CN
COUNTRY  50 IS  KR
COUNTRY  40 IS  RU

----- Original Message ----- From: "Imail Admin" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, March 01, 2005 3:18 PM
Subject: [Declude.JunkMail] timeout test on Spam



Hi All,

We get a fair amount of spam that slips through without triggering anything
(including Sniffer). I notice in the headers for these messages a line like
the following:


X-Note: This E-mail was sent from (timeout) ([213.213.213.56]).

Should I be using the timeout as a test for spam?  If so, how?

Thanks,

Ben
BC Web

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to