Any idea why this isn't working then? The footer isn't in the body.
<snip> 10/29/2004 10:52:08 Q58eb9dc3003eff1d WHITELISTFILTER:-1100 . Total weight = -1100. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Using [incoming] CFG file e:\IMail\Declude\netrends.com\mark_smith.junkmail. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Msg failed CATCHALLMAILS (). Action=WARN. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Msg failed WHITELISTFILTER (Message failed WHITELISTFILTER test (line 5, weight -1100)). Action=WARN. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Msg failed IPNOTINMX (). Action=WARN. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Msg failed NOLEGITCONTENT (No content unique to legitimate E-mail detected.). Action=WARN. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Msg failed MS-WHITE (Message failed MS-WHITE: 0.). Action=WARN. 10/29/2004 10:52:08 Q58eb9dc3003eff1d Msg failed WEIGHTLEGIT (Total weight between -5000 and 119.). Action=FOOTER. 10/29/2004 10:52:08 Q58eb9dc3003eff1d L1 Message OK 10/29/2004 10:52:08 Q58eb9dc3003eff1d Subject: testing a 10/29/2004 10:52:08 Q58eb9dc3003eff1d From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 65.196.89.132 ID: 10/29/2004 10:52:08 Q58eb9dc3003eff1d Tests failed [weight=-1100]: CATCHALLMAILS=WARN WHITELISTFILTER=WARN IPNOTINMX=WARN NOLEGITCONTENT=WARN MS-WHITE=WARN WEIGHTLEGIT=FOOTER 10/29/2004 10:52:08 Q58eb9dc3003eff1d Last action = IGNORE. </snip> GLOBAL.CFG: WEIGHTLEGIT weightrange x x -5000 119 >From my mark_smith.junkmail file: WEIGHTLEGIT FOOTER [SPAM Filter Debug]:[%WEIGHT%]:[%LOCALHOST%]:[%TESTSFAILEDWITHWEIGHTS%] > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. > Scott Perry > Sent: Friday, October 29, 2004 10:45 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Adding Tests failed and > weight to the body > > > >I should have rephrased this... > >Can this be done without using the FOOTER action. > >In other words is there a way to do this to all emails without > >impacting other actions? > > > >I guess I could do this with the CATCHALLMAILS filter right? > > That's exactly what I would recommend doing: > > CATCHALLMAILS FOOTER [This E-mail failed the following tests: > %TESTSFAILED]... > > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers since 2000. > Declude Virus: Ultra reliable virus detection and the leader > in mailserver vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > > ---- > This outgoing message is guaranteed to be authentic by > Message Level users. > Guarantee the authenticity of your email @ > http://www.messagelevel.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
