After reviewing my Debug log, I found that the FromFiles are run first. Obviously, most email is spoofed and therefore will not show up, however, does Declude actually check fromfile for the mailfrom line or what it shows up as the X-Declude-Sender line?
Both. The X-Declude-Sender: header displays the return address ("MAIL FROM" from the SMTP envelope), which is the same one that the "fromfile" test type (and anything else in Declude JunkMail) looks at.
If it is indeed the X-Declude-Sender, it seems it would be benefical to move the domains
from our filter files into fromfiles thus allowing for a reduction on
CPU processing since they are run first (while using SKIPIFWEIGHT lines
in filters).
That sounds like it would work fine.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---- This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
