Or you can use combos to limit the damage.
As an example, being on a DUL list / having a dynamic IP isn't a pure indicator of spam. Someone can be on several of these lists and be legit. So I'll enforce a max weight of 100 on all the DUL tests.

#################################################################################################
# Is it on a Dial Up list (DUL) #
#################################################################################################

TESTSFAILED END CONTAINS FILTER-BYPASS
TESTSFAILED END CONTAINS RBL-BYPASS
TESTSFAILED END CONTAINS MAILFROM-POSTMASTER

MAXWEIGHT 100

TESTSFAILED 60 CONTAINS NJABL-DUL
TESTSFAILED 75 CONTAINS NJABL-DYNABLOCK
TESTSFAILED 60 CONTAINS SORBS-DUHL
TESTSFAILED 60 CONTAINS MAILPOLICE-DYN-COMBO
TESTSFAILED 29 CONTAINS MP-DYNAMIC
TESTSFAILED 32 CONTAINS REVDNS-DUL-KEYWORDS
TESTSFAILED 32 CONTAINS HELO-DUL-KEYWORDS
TESTSFAILED 49 CONTAINS REVDNS-DIALUP

----- Original Message ----- From: "Travis Sullivan" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, October 21, 2005 10:11 AM
Subject: [Declude.JunkMail] found something new to me


http://www.mail-archive.com/[email protected]/msg24116.html

anyone doing any of these combo tests? sounds very cool! I have not used them and would highly welcome any tips any of you might have.

Also, is declude 2.9 the single process mode or the new application thread model?

Travis
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to