Declude JunkMail v1.55 (beta) now includes the ability to use some basic
filtering.
First, you need to define the test, by adding a line like the following to
your global.cfg file:
MYFILTER filter c:\IMail\Declude\myfilter.txt x 5 0
Then, you need to create the filter file (myfilter.txt in the example
above). Each line contains one filter, in the format "location weight
filtertype filtertext", where "location" is where the filter will be
looking (currently, this can be SUBJECT, HELO, BODY, MAILFROM, REMOTEIP or
REVDNS), "weight" is the weight to add to the E-mail if the filter matches
(normally 0), "filtertype" is currently either "CONTAINS" or "STARTSWITH",
and "filtertext" is the text to look for (case insensitive, so "hello" will
match both "hello" and "hELLo"). For example:
HELO 8 CONTAINS $domain
SUBJECT 3 CONTAINS enlarge
MAILFROM 3 STARTSWITH $success$@
The first one would look for HELO/EHLO text that contains "$domain" in it
(and if it does, a weight of 10 will be added to the weight of the E-mail),
the second one would look for an E-mail that contains "enlarge" in it and
add 3 to the weight of the E-mail, and the last one would look for a return
address beginning with "$success$@" (and add 3 to the weight of the E-mail
if there is a match).
Note that the weights are in addition to whatever action you have set for
the test, so if you have:
MYFILTER WARN X-Warning: This E-mail was filtered.
WEIGHT10 HOLD
in the \IMail\Declude\$default$.JunkMail, an E-mail with "$domain" in the
HELO/EHLO text would be held and have a warning in the headers, and be held
(since the MYFILTER test was defined to have a weight of 5, and the
"$domain" in the HELO/EHLO added 8 to the weight).
You can also use negative weights, such as:
REVDNS -5 CONTAINS yahoo.com
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
