You could create one, or possibly Scott could work the exceptions into Declude.

The code that is tripping this is UUENCODED and not specific to the attachment type.  There are two lines that I am aware of that signal a UUENCODED attachment:

    begin 666
    begin 600

You would need to be running the 1.79 beta to do this effectively, and it would require changing the name of the COMMENTS test to something like COMMENTS-PRE and changing the score to zero, and then creating a custom filter with the score that you want to give the comments test like so:

---- Comments.txt -----
BODY              END    CONTAINS      begin 666
BODY              END    CONTAINS      begin 600
TESTSFAILED      5      CONTAINS      COMMENTS-PRE

Note that if you upgrade to the 1.79 beta, you will probably also want to replace the older versions of my filters with the ones that are designed to work with the new functionality of the beta software.  These can be found at http://www.mailpure.com/software/decludefilters/beta/

Matt




Mike Gable wrote:
This email failed some tests that it shouldn't--at least the COMMENTS
test--from what I can tell. Help please.
      
Unfortunately, there isn't much that can be done about this 
-- it seems 
that some .PDF files are sent in a strange way that causes 
them to appear 
to have anti-filter HTML comments in them.

                                                    -Scott
    

Could one use an "anti-filter" such as this?:

BODY -10 CONTAINS .PDF>>
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  

-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

Reply via email to