> Is there a way to make two tests linked together? > > In this case the > > SUBJECT 0 CONTAINS Osama bin Laden Captured > > And a > > BODY 0 CONTAINS "link to pictures (whatever the > link is)" > > So for the test to trip both conditions would have to be true? In this > case filtering on the SUBJECT will catch this mail but of course > anything with the same text.
You can assign each a weight at or just over half your hold weight. Maybe if you hold at 10: SUBJECT 5 CONTAINS Osama bin Laden Captured BODY 5 CONTAINS link to pictures... I just used the subject as a hold in itself, using just "Laden Captured" but it all depends on how you want to handle it. For us, holf=ding that should be a non-issue. For you it may be. Jeff > Goran Jovanovic > The LAN Shoppe > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: > > Tuesday, April 27, 2004 11:02 AM To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] New Trojan > > > > There's a new trojan floating around with the subject of "Osama bin > > Laden Captured" and a link to photos which is actually a trojan. So > far > > easy enough to filter with JunkMail, but this has hit a number of > > law enforcement agencies and is apparently very tempting, a number > > of users have opened it. > > > > Sigh... You can warn them... :) > > > > Jeff Cochran > > City of Naples, Florida > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > [AUTOMATED NOTE: Your mail server [205.150.108.13] is missing a > reverse DNS entry. All Internet hosts are required to have a reverse > DNS entry. The missing reverse DNS entry will cause your mail to be > treated as spam on some servers, such as AOL.] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
