Spaces before the phrase are not used as the line is normalized. Also the
regular CONTAINS is not case sensitive.
It would be better to use
SUBJECT 0 PCRE (?i:(discount|off).{0,2}Co(upon|de))
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
Beckstrom
Sent: Monday, April 07, 2008 2:42 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Filters not triggering
Hi Everyone.
I have a filter set up to delete an email if the subject line contains the
keyword in the filter. For some odd reason, the filter is not triggering
and it really has me baffled. I could use some suggestions on this one.
The filter is called: Filter_Subject_delete.txt
Here are the relevant lines from the filter:
SUBJECT 0 contains discount. Code
SUBJECT 0 contains discount.Code
SUBJECT 0 contains discount. coupon
SUBJECT 0 contains discount. Coupon
SUBJECT 0 contains discount.coupon
SUBJECT 0 contains discount.Coupon
SUBJECT 0 contains off .code
As you can see, I added some filter lines to test to see if I was running
into an issue with the filter not triggering due to case sensitivity. I
didn't think the filters were case sensitive, but in trying to debug this
problem I checked to see if that was an issue or not.
My junkmail config has the following specifying to delete the spam:
Filter_Subject_Delete DELETE
Here are the headers from the spam that was not deleted:
Return-Path: <[EMAIL PROTECTED]> Mon Apr 07 08:49:57 2008
Received: from 224samana75.codetel.net.do [200.88.75.224] by my.server.com
with SMTP;
Mon, 7 Apr 2008 08:49:57 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "brit luc" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: [SPAM]- Score (11)81% discount. Coupon #2IJk
Date: Mon, 07 Apr 2008 12:34:28 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01C898BA.05CF202E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-invURIBL-Scan: Scanned by invURIBL 3.1.1 on 4/7/2008 8:50:18 AM
X-invURIBL-Weight: 0
X-invURIBL-Range: CLEAN
X-RBL-Warning: SPAMCOP: "Blocked - see
http://www.spamcop.net/bl.shtml?200.88.75.224";
X-RBL-Warning: SPFUNKNOWN: SPF returned UNKNOWN for this E-mail.
X-RBL-Warning: Filter_Country: Message failed Filter_Country test (line 59,
weight 3)
X-Declude-RefID:
X-Note: ========================================
X-Note: Spam Score: [11]
X-Note: Scan Time: 08:50:19 on 07 Apr 2008
X-Note: Spool File: 35052863.eml
X-Note: Server Name: 224samana75.codetel.net.do
X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Reverse DNS & IP: 224samana75.codetel.net.do [200.88.75.224]
X-Note: Recipient(s): [EMAIL PROTECTED]
X-Note: Country Chain: DOMINICAN REPUBLIC->destination
X-Note: Failed Weights: SPAMCOP [7], SPFUNKNOWN [1], Filter_Country [3],
WEIGHT10 [10]
X-Note: ========================================
Where it says my.server.com and my.address.com is where I edited info I
didn't want posted to the list.
Here is the Declude log entries from when the email was scanned:
04/07/2008 08:50:03.527 35052863.eml CFG: Bypassing IP 127.0.0.1.
04/07/2008 08:50:03.527 35052863.eml CFG: Set hop to 0.
04/07/2008 08:50:03.527 35052863.eml STOPPROCESSINGONFIRSTDELETE: Set to ON
04/07/2008 08:50:10.746 35052863 Last line of headers checking for Recived:
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
04/07/2008 08:50:10.746 35052863 About to run spam tests
04/07/2008 08:50:18.980 35052863 JunkMailBase64 Start
04/07/2008 08:50:18.980 35052863 JunkMailBase64 Start
04/07/2008 08:50:18.980 35052863 DeHTML End: 495:367 ratio=0.425754
04/07/2008 08:50:19.011 35052863 Doing filter file
D:\Apps\smartermail\Declude\CustomFilters\Filter_Subject_Delete.txt.
04/07/2008 08:50:19.011 35052863 Filter Filter_Subject_Delete: Not skipping
E-mail due to current weight of 11.
04/07/2008 08:50:19.011 35052863 SPAMCOP:7 SPFUNKNOWN:1 Filter_Country:3 .
Total weight = 11.
I edited some of the log text, but the above is the relevant stuff. We're
running declude 4.3.46 on Smartermail 3.
Any ideas on why that filter is not triggering?
Thanks,
Dave
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
