New example - same problem.
line in global.cfg
SUBJFILTER filter d:\imail\declude\filters\subject.txt x 5 0
first line in subject.txt
SUBJECT 3 ISBLANK
<log snippet>
10/29/2004 11:26:24 Q6ef70429031ee533 GIBBERISH:4 CMDSPACE:9 SPAMCHK:2 .
Total weight = 15.
10/29/2004 11:26:24 Q6ef70429031ee533 Subject:
10/29/2004 11:26:24 Q6ef70429031ee533 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] IP: 221.114.77.52 ID:
10/29/2004 11:26:24 Q6ef70429031ee533 Tests failed [weight=15]: HOUR=IGNORE
GIBBERISH=IGNORE CMDSPACE=IGNORE IPNOTINMX=IGNORE SPAMCHK=IGNORE
WEIGHT0915=HOLD
10/29/2004 11:26:24 Q6ef70429031ee533 Last action = HOLD.
</log snippet>
<header>
Received: from emb1.bcc.univie.ac.at [221.114.77.52] by mail.jvcdiscusa.com
(SMTPD32-7.13) id AEF7429031E; Fri, 29 Oct 2004 11:25:27 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "Darrin Tapia" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject:
Date: Sat, 30 Oct 2004 08:22:08 +0000
MIME-Version: 1.0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 8bit
X-Declude-Sender: [EMAIL PROTECTED] [221.114.77.52]
X-Note: This E-mail was scanned by Declude JunkMail for JVC.
X-Note: Failed tests - HOUR, GIBBERISH, CMDSPACE, IPNOTINMX, SPAMCHK,
WEIGHT0915
X-Country-Chain: JAPAN->destination
X-Note: Total spam weight of this E-mail is 15.
X-Note: This E-mail was sent from (timeout) ([221.114.77.52]).
</header>
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Friday, October 29, 2004 8:57 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Blank subjects
>Shouldn't this header fail this test ?
It looks like it should.
What are the Declude JunkMail log file entries for that E-mail? I'm
wondering if Declude JunkMail saw a different subject for some reason.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
----
This outgoing message is guaranteed to be authentic by Message Level users.
Guarantee the authenticity of your email @ http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.