Scott, just wondering why these new tests use "*" instead of "x" for the undefined variables. I tried using "x" and the results were not good. I haven't tried using "*" yet, but will if that is what the undefined variables should be for these new tests.
Bill ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 19, 2003 5:14 PM Subject: Re: * [Declude.JunkMail] Declude JunkMail v1.68 (beta) released > > >I personally would like to see some examples and more details on how to > >implement new test when you email a notice like this announcing them. > > That's what this list is for. :) > > The "nonenglish" test type will detect E-mails that are not in English > (specifically, ones that are using foreign characters in the Subject: > header). It can be defined in the global.cfg fileas: > > NONENGLISH nonenglish * * 1 0 > > The "subjectchars" and "subjectspaces" tests work by counting the number of > characters in a subject and the number of spaces, respectively. The test > definition will define how many characters or spaces must appears before > the test will be triggered. So the following tests would catch E-mail with > a subject greater than 60 characters, and one with more than 15 spaces: > > LONGSUBJECT subjectchars 60 * 3 0 > SUBJECTSPACES subjectspaces 15 * 3 0 > > Finally, the "dnsbl" test type will let you use any type of DNS-based spam > test, aside from the current ip4r and rhsbl style tests. This likely won't > be useful until future tests make it worthwhile. A sample would be: > > SOMEHELOTEST dnsbl %HELO%.bl.example.com 127.0.0.3 5 0 > > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
