-Scott
Can you clarify the END for me?

Would this fail the test if the e-mail came with a revdns of us.info?

revdns 10 contains info

revdns end contains info

mailfrom 10 contains info





Scott Fisher
Director of IT
Farm Progress Companies

>>> [EMAIL PROTECTED] 07/09/04 11:44AM >>>

>OK why then the
>07/09/2004 00:15:58 Q462a09e900349a60 Triggered CONTAINS filter SAVFILTER on
>X-Bulk:  99 [weight->0; X-Bulk:  99

Because a line in the filter matched.  But:

>here are the contents of the sav-smtp.txt that did not work, why?
>HEADERS END CONTAINS X-Bulk:  99
>HEADERS END CONTAINS X-Bulk:  98
...

>and here are my modified lines that do work, I changed this last night and
>route to now works
>HEADERS 0 CONTAINS X-Bulk:  99
>HEADERS 0 CONTAINS X-Bulk:  98
...

When Declude JunkMail encounters "END" in a filter, it does *not* fail the 
test.  Why?  Because it was designed to be used in a case like this:

         TESTSFAILED     END     CONTAINS        AWESOMETEST
         ...

In this case, you want to skip the filter if the AWESOMETEST test failed 
(since you are positive the E-mail is spam, and don't want the rest of the 
filter to run).

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to