[Declude.JunkMail] Filter processing problem OR needed rather than AND.

2004-11-16 Thread Mark E. Smith
I have a filter that I've built for one of my customers that allows them to whitelist items JUST for their domain. The way that I do this is to add the following lines to their whitelist filter: ALLRECIPSEND NOTCONTAINS@domain1. ALLRECIPSEND NOTCONTAINS@domain2.

Re: [Declude.JunkMail] Filter processing problem OR needed rather than AND.

2004-11-16 Thread Matt
We've been calling it a 'combo' filter. You need to set up two filters, one that is non-scoring that pre-qualifies the ALLRECIPS, and the second that only runs if the first filter is tripped. In your first filter, do the following: ALLRECIPS 0 CONTAINS @domain1.com ALLRECIPS 0

[Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread John Tolmachoff \(Lists\)
Those using SKIPIFWEIGHT in filters take note: I have found that nNOLEGITCONTENT and nIPNOTINMX are scored AFTER all filters. What this means is if you have filters say with SKIPIFWEIGHT 35, a message scores 36 before the filters, but it passes NOLEGITCONTENT and/or IPNOTINMX, the final weight

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread R. Scott Perry
Those using SKIPIFWEIGHT in filters take note: I have found that nNOLEGITCONTENT and nIPNOTINMX are scored AFTER all filters. ... Scott, can the NOGEGITCONTENT and IPNOTINMX scoring occur earlier before the filters, as expected? No. It isn't expected. :) Specifically, when the SKIPIFWEIGHT

RE: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread John Tolmachoff \(Lists\)
I could understand ignoring negative weights for filters and fromfiles to a point, but negative weights for other tests should be included. In the case of the messages I was seeing, they were spam, but because the SKIPIFWEIGHT saw 40 and didn't run, but nNOLEGITCONTENT subtracted 8 at the end, the

[Declude.JunkMail] FYI: TESTFAILED Syntax Gotcha

2004-11-16 Thread Rick Davidson
Its not a bug but its definately a gotcha that will bug you if you arent careful :) I recently created a filter test called HEADERS that checks for spoofing of my own systems as well as for defunct domains and a few other header specific tests, it catches alot of junk with little overhead so I

[Declude.JunkMail] [OT] ldap2alias on Backup mail servers

2004-11-16 Thread Scott Fosseen
Currently I have 1 IMail 8.1x server with 12 virtual domains. Each domain has a dedicated IP address. I currently have 3 backup mail servers, one local, and 2 on other ISP links. Currently each backup mail server is running MS SMTP using 1 IP address. My MX records look like this school.k12

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread Matt
Scott, I'm personally only crediting one point for nNOLEGITCONTENT and nIPNOTINMX, the rest are in custom filters, so this hasn't seemed to cause me a noticeable issue, but it is something that I inquired about many months ago after someone else reported the issue and you indicated wasn't the

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread R. Scott Perry
I think the question revolves specifically around when the negative weights for Declude's built-in tests and possibly things like fromfiles, spamdomains, and ipfiles are deducted from the weight used to calculate SKIPIFWEIGHT. If these are only deducted after the filters have run, it would

RE: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread Glen Harvy
Hi, The docs imply that SKIPIFWEIGHT is only usable in the actual filter file. Can it also be used in the global.cfg file? _ Glen Harvy Aquarius Communications for all your Internet Needs. Phone 9977 3788 Fax 9977 3844 -Original Message- From:

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread Nick
On 16 Nov 2004 at 18:28, R. Scott Perry wrote: The SKIPIFWEIGHT option attempts to calculate the weight with the information it has. It will add the weights for any tests that have already been run and failed, but will not consider negative weights. Scott - Are you saying that SKIPIFWEIGHT

RE: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread R. Scott Perry
The docs imply that SKIPIFWEIGHT is only usable in the actual filter file. Correct. Can it also be used in the global.cfg file? No, it only has meaning in the filter files. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread R. Scott Perry
The SKIPIFWEIGHT option attempts to calculate the weight with the information it has. It will add the weights for any tests that have already been run and failed, but will not consider negative weights. Are you saying that SKIPIFWEIGHT completely ignores any test that passes a negative value?

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread Nick
On 16 Nov 2004 at 18:53, R. Scott Perry wrote: Scott - The actual weight is the same, regardless of whether SKIPIFWEIGHT is used. We're just talking about the weight that the SKIPIFWEIGHT option sees, which may differ from the actual weight of the E-mail. Understood - Sorry about not being

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread Scott Fisher
I'm confused. And it's always been a subject that confuses me. How about an example... Mail fails SBL for 100 weight. Mail fails revdns-whitelist filter which adds a -200 weight. So net weight at this time is -100. Next filter has a skipifweight 75. Would the filter get skipped or processed?

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread Matt
Here's how this works if I'm in fact correct. There are two scoring columns in Declude, the first is scored if a test fails, the second is scored if a test is not failed. It sounds like the SKIPIFWEIGHT works on the cumulative value of the first column only. Most don't use the second column

Re: [Declude.JunkMail] FYI on SKIPIFWEIGHT

2004-11-16 Thread R. Scott Perry
Here's how this works if I'm in fact correct. There are two scoring columns in Declude, the first is scored if a test fails, the second is scored if a test is not failed. It sounds like the SKIPIFWEIGHT works on the cumulative value of the first column only This is exactly how it works.