I already know
i'm impatient, but hey I really like the weighing system.
Since I can't
filter on the entire header i'm trying to make use of the HELO
filter.....
Does it ONLY look
at the last hop, or does it go by the HOP settings in
global.cfg?
[global.cfg]
HOP
0
HOPHIGH 5
SNIFFER filter d:\imail\declude\filters\sniffer.txt x 1 0
HOPHIGH 5
SNIFFER filter d:\imail\declude\filters\sniffer.txt x 1 0
[$default$.junkmail]
SNIFFER WARN X-RBL-Warning: SNIFFER: Message Body looks
like SPAM
[sniffer.txt]
HELO 1 CONTAINS
$SNIFFER$
The word filter
works when I simulate a message with a bogus helo ( Typing my own commands to
port 25) directly to the declude mail server,
but when allowing
the message to relay through my gateways the filter is not
triggered.
If I can get this
filter to trigger when going through my gateways I already have altered the
Header insertion to simulate another hop with the $sniffer$ text in the helo
portion, so I can accompish what I need.
[ Example message caught ]
Received: from $SNIFFER$ [204.49.154.229] by mail.bsc.net
(SMTPD32-6.06) id A32E16B1012C; Wed, 17 Jul 2002 16:35:42 -0500
Subject: test2
Message-Id: <200207171635583.SM01888@$SNIFFER$>
X-RBL-Warning: SNIFFER: Message Body looks like SPAM
Received: from $SNIFFER$ [204.49.154.229] by mail.bsc.net
(SMTPD32-6.06) id A32E16B1012C; Wed, 17 Jul 2002 16:35:42 -0500
Subject: test2
Message-Id: <200207171635583.SM01888@$SNIFFER$>
X-RBL-Warning: SNIFFER: Message Body looks like SPAM
X-Declude-Weight: 10
[ Example
message skipped]
Received: from
fw2.netsmith.net [204.49.160.3] by mail.bsc.net with ESMTP
(SMTPD32-6.06) id A45A18BA0126; Wed, 17 Jul 2002 16:40:42 -0500
Received: from ns1.netsmith.net (unknown [204.49.160.4])
by fw2.netsmith.net (Postfix) with SMTP id A58DC1F05D
for <[EMAIL PROTECTED]>; Wed, 17 Jul 2002 16:40:27 -0500 (CDT)
Received: from fw2.netsmith.net ([204.49.160.3])
by ns1.netsmith.net (NAVGW 2.5.1.18) with SMTP id M2002071716433904153
for <[EMAIL PROTECTED]>; Wed, 17 Jul 2002 16:43:39 -0500
Received: by fw2.netsmith.net (Postfix, from userid 65531)
id 811941750A; Wed, 17 Jul 2002 16:40:27 -0500 (CDT)
Received: from $SNIFFER$ (unknown [204.49.154.229])
by fw2.netsmith.net (Postfix) with SMTP id F3874174FD
for <[EMAIL PROTECTED]>; Wed, 17 Jul 2002 16:40:18 -0500 (CDT)
Subject: test
Message-Id: <[EMAIL PROTECTED]>
X-Declude-REVDNS: [No Reverse DNS] ([204.49.160.3]).
X-Declude-Weight: 0
(SMTPD32-6.06) id A45A18BA0126; Wed, 17 Jul 2002 16:40:42 -0500
Received: from ns1.netsmith.net (unknown [204.49.160.4])
by fw2.netsmith.net (Postfix) with SMTP id A58DC1F05D
for <[EMAIL PROTECTED]>; Wed, 17 Jul 2002 16:40:27 -0500 (CDT)
Received: from fw2.netsmith.net ([204.49.160.3])
by ns1.netsmith.net (NAVGW 2.5.1.18) with SMTP id M2002071716433904153
for <[EMAIL PROTECTED]>; Wed, 17 Jul 2002 16:43:39 -0500
Received: by fw2.netsmith.net (Postfix, from userid 65531)
id 811941750A; Wed, 17 Jul 2002 16:40:27 -0500 (CDT)
Received: from $SNIFFER$ (unknown [204.49.154.229])
by fw2.netsmith.net (Postfix) with SMTP id F3874174FD
for <[EMAIL PROTECTED]>; Wed, 17 Jul 2002 16:40:18 -0500 (CDT)
Subject: test
Message-Id: <[EMAIL PROTECTED]>
X-Declude-REVDNS: [No Reverse DNS] ([204.49.160.3]).
X-Declude-Weight: 0
