> > From: Yavuz Maslak [mailto:[EMAIL PROTECTED]
> > Sent: Sunday, December 07, 2008 3:02 PM

> > But I could not find how I give high score for  a spammer who doesn't
> > use gmail's mail servers.
> > 
> > Although a  domain has domain keys, how can I give positive score for a
> > mail which comes from a fake smtp server ?

On 07.12.08 15:52, Giampaolo Tomassoni wrote:
> There is no direct way (to my knowledge) to do this.
> 
> You have to apply a positive score to all mail claiming to be "From:" a
> gmail address, then apply a negative score voiding the first one to the
> DKim-verified ones. 

I think that giving score that has gmail.com in From address, but is nor
DKIM Verified, should be just enough.

Generally, there should be a meta rule for domains that have sign-all policy
and the mail is not signed, e.g.:

meta DKIM_MISS (DKIM_POLICY_SIGNALL && !DKIM_VERIFIED)
score DKIM_MISS 3.0

and maybe for mail that is signed, but the signature was
meta DKIM_FAIL (DKIM_SIGNED && !DKIM_VERIFIED)
score DKIM_MISS 1.0

... I just guessed those scores, but maybe someone could run mass-check ?

-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.

Reply via email to