[Declude.JunkMail] More on comments test

[Rick Rountree]

Scott,

I have the "comments" test set up like this:

COMMENTS comments weight x 0 0

As I understand it, this essentially counts the number of comments and adds the total to the weight of the message. If I'm understanding this correctly, then I think it isn't working properly.

I am currently using COPYTO to send any message flagged as failing "comments" to me. I received one the Norton System Works spams from South America this morning that contained 133 instances of <!--XaULbS--> used in the manner of what you're trying to catch, like so:

<P ALIGN=CENTER><FONT SIZE=5 PTSIZE=16>N<!--XaULbS-->or<!--XaULbS-->to<!--XaULbS-->n S<!--XaULbS-->ys<!--XaULbS-->te<!--XaULbS-->m<!--XaULbS-->W<!--XaULbS-->or<!--XaULbS-->k<!--XaULbS-->s 2<!--XaULbS-->00<!--XaULbS-->3 S<!--XaULbS-->of<!--XaULbS-->tw<!--XaULbS-->are Su<!--XaULbS-->it<!--XaULbS-->e P<!--XaULbS-->ro<!--XaULbS-->fe<!--XaULbS-->ss<!--XaULbS-->ion<!--XaULbS-->al E<!--XaULbS-->dit<!--XaULbS-->io<!--XaULbS-->n<BR>

However, the total weight of this email was only 16.

Am I understanding this incorrectly?

Rick Rountree
Sr Network Admin
Dundee.Net
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.