Re: [Declude.JunkMail] New test

[Matt]

Greg, NOTCONTAINS would be incredibly helpful for lots of filters, though of course all forms of NOT filters would be good addition, but NOTCONTAINS is the most flexible and therefore capable, especially to defeat a counterbalancing filter so that it doesn't credit too much.  I've been holding back on asking about this again (along with other NOT's), but since you mentioned it... As far as your issue is concerned, I'm sure you probably have a reason for this, but you might consider whitelisting your own address space and using Hijack for spam prevention.  If you were on IMail 8, WHITELIST AUTH and PREWHITELIST ON wouldn't be bad ideas either if you required AUTH.  For anyone doing filtering on things like HELO, REVDNS, CMDSPACE and SPAMHEADERS, it helps to exclude hosted/outgoing traffic from such filters.  I believe that Entourage on a Mac will fail CMDSPACE, at least sometimes fail this new HELOIP test, and it's possible that they will also fail SPAMHEADERS if you don't turn off scoring hits on a missing Message-ID (Outlook 2003 fails this on a direct connection at least, and it seems that Entourage has many of the same behaviors).  Just a general FYI since some around here might not have happened upon these issues. Matt System Administrator wrote: on 4/19/04 5:30 PM, David Dresler wrote: For the most part, its a great new test and is working well. However, i've noticed that Entourage seems to be getting caught. Yes, I can confirm this (I'm using Entourage). I've also noticed that some other e-mail clients are having the same problem (Apple's Mail for one). I sure wish (here I go again) that we could have a NOTCONTAINS filter action. If we had that command we (an ISP) could use this test and the CMDSPACE test with filters like LOCALHELOISIP - SKIPIFWEIGHT 100 TESTSFAILED END NOTCONTAINS HELOISIP REMOTEIP -10 CONTAINS (an ACS subnet) REMOTEIP -10 CONTAINS (another ACS subnet) LOCALCMDSPACE - SKIPIFWEIGHT 100 TESTSFAILED END NOTCONTAINS CMDSPACE REMOTEIP -10 CONTAINS (an ACS subnet) REMOTEIP -10 CONTAINS (another ACS subnet) to neutralize the failed HELOISIP and CMDSPACE tests for my local users (due to the e-mail client they are using). Later, Greg --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================