RE: [Declude.JunkMail] Blank body & Subject

Mon, 19 Jun 2006 12:27:55 -0700

Title: Message
I'd suggest that this would work better without false positives.  The headers are missing darn near everything, the date, the message-id, the subject, and the from.  Any one of these could be missing, but Michael's script will punish with a weight of 30 if either of the two tests trigger.
 
Try this instead:
 
begin of msc.txt ----------------------
MINWEIGHTTOFAIL 2
 
HEADERS  1 NOTCONTAINS From:
HEADERS  1 NOTCONTAINS Subject:
end of msc.txt ----------------------
test definition in Global.cfg -----------------
FILTERMSC filter D:\SmarterMail\declude\msc.txt x  18 0
 
action definition in $default$.junkmail (for inbound) or global.cfg (for gatewayed domains)
FILTERMSC WARN
 
which will result in a hold weight of 20 on my system, with my weight20 action being a HOLD.
 
For what it's worth, I'm seeing these hit the BADHEADERS, SPAMHEADERS and lots of RBL hits such as SPAMCOP, so these are pushed easily over my hold weight.
 
Andrew 8)
 
 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski
Sent: Sunday, June 18, 2006 4:37 PM
To: [email protected]
Subject: RE: [Declude.JunkMail] Blank body & Subject

Looks like the following filter is working well. Using the HOLD action to verify filter success/failure. Caught 32 in the last 5 minutes.
 
Global.cfg
FILTERMSC filter D:\SmarterMail\declude\msc.txt x  0 0
 
msc.txt
HEADERS 30 NOTCONTAINS from:
HEADERS 30 NOTCONTAINS subject:
 
$default$.junkmail
FILTERMSC HOLD D:\smartermail\spool\msc
 
Mike

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

Reply via email to