Markus,
Since it is figured out you may not need this right now but I had a
devil of a time this weekend trying to figure out some text in the body
of some spam. I looked at it in View Source in Outlook and was sure that
I had the right text yet my filter would not fire. I sent a test mail
and the filter did fire so I was stumped.
What I did was to create a TESTCAPTURE filter that had a simple test in
it like SUBJECT 0 CONTAINS -ddrugs. Then instead of WARNing or COPYTOing
I did a TESTCAPTURE ALERT. In my TestCaptureAlert.eml file I had the
following
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
Subject: Test Capture
The message you just sent failed the GJ Capture test
Original Headers follow:
%HEADERS%
Original Body follow:
%BODY%
--------------------------
Now I was able to see what was really being seen by the filters and
found out that I really needed the following in my filter file
BODY 40 CONTAINS Visit our = Pharm-Mail=20 Sh0p
This was do to HTML fonts and display properties. In the HTML e-mail is
showed up as
Visit our Pharm-Mail Sh0p
By looking at the %BODY% results this was the only way that I could
really see the content. So you could add the %ALLRECIPS% and fire it off
to you which would show you exactly what the variable contains.
Just a thought.
Goran Jovanovic
The LAN Shoppe
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Markus Gufler
> Sent: Wednesday, March 09, 2005 8:39 AM
> To: [email protected]
> Subject: RE: [Declude.JunkMail] ALLRECIPS in filter files not working?
>
>
> > It needs to be "<[EMAIL PROTECTED]>, < [EMAIL PROTECTED]> (where
> > the first "[EMAIL PROTECTED]" is the name entered by the user,
> > and the second one is the one that IMail uses).
> >
> >
http://www.mail-archive.com/[email protected]/msg18392.html
>
> Wow!?
> It works, it works! :-)
>
> Maybe this is something that can be added to the junkmail manual and
so
> save
> other people hours of work.
> As the %ALLRECIPS% variable has the expected content
> "[EMAIL PROTECTED]"
> it's practically impossible to find out this format.
>
> Thanks
> Markus
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
