I only score UCE L2 if there was no UCE L1 score.

Filter:
# Combine the UCEPROTECT Only Add LEVEL2 if LEVEL1 not hit
TESTSFAILED END CONTAINS UCEPROTECT-LEVEL1-LAST
TESTSFAILED 50 CONTAINS UCEPROTECT-LEVEL2-LAST

This way I'm not double scoring this test as many are in both,
  ----- Original Message ----- 
  From: Bonno Bloksma 
  To: [email protected] 
  Sent: Thursday, April 19, 2007 5:57 AM
  Subject: [Declude.JunkMail] lot's of legit mailservsr in spamdatabases


  Hi,

  How do you guys deal with it, LOTS of legit mailservers are listed in what 
used to be reliable spamsender databases.

  X-RBL-Warning: SPAMBAG: 109.176.216.212.blacklist.spambag.org.
  X-RBL-Warning: SPAMCANNIBAL: "blocked, See: 
http://www.spamcannibal.org/cannibal.cgi?page=lookup&lookup=212.216.176.109";
  X-RBL-Warning: UCEPROTECT-1: "Sorry 212.216.176.109 is Level 1 listed at 
UCEPROTECT-NETWORK. See 
http://www.uceprotect.net/rblcheck.php?ipr=212.216.176.109";
  X-RBL-Warning: UCEPROTECT-2: "Sorry 212.216.176.109 is Level 2 listed at 
UCEPROTECT-NETWORK. See 
http://www.uceprotect.net/rblcheck.php?ipr=212.216.176.109";

  But 212.216.176.109 is a normail mailserver vsmtp21.tin.it and is trying to 
deliver mail from a "customer" to us. Have spammers won this race, can we no 
longer trust these databases? Is there a ip list with "all" legitimate 
mailservers for most ISP that I can use to reduce points?

  For the hotmail mailservers it was easy to reduce the points, it's a lot 
harder to do for all the other "real" mailservers.


  Met vriendelijke groet,
  Bonno Bloksma
  hoofd systeembeheer



  tio hogeschool hotelmanagement en toerisme 
  begijnenhof 8-12 / 5611 el eindhoven
  t 040 296 28 28 / f 040 237 35 20
  [EMAIL PROTECTED]  / www.tio.nl 

  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.JunkMail". The archives can be found
  at http://www.mail-archive.com. 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to