This will be fixed in the next release. Specifically, this will happen if the string you are comparing against ("(timeout)" in this case) is shorter than the search string (".mailpure.com"). So given the details of the issue, a broader workaround might be an extra line "REVDNS END NOTENDSWITH .com" as the first line.
I think I am going to have to use multiple files to pull this one off if the bug is that far reaching. Would you please be a little more specific about when the bug will appear, i.e. all NOTENDSWITH filters, possibly other filters, or only certain conditions with NOTENDSWITH filters (when combined with END for instance or maybe only with REVDNS).
It only affects NOTENDSWITH, and only occurs when the string you are comparing against is shorter than the search string.
The reason that it affects NOTENDSWITH is because NOTENDSWITH requires checking to see if there is an exact match of the search string with the string you are comparing against at a position if [its length minus the length of the search string]. That doesn't work properly when the search string is the longer of the two.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
