You can do it multiple ways and I am sure there is more
[1] Use an IPFILE filter
[2] You can use the method you propose below, but you will need to adjust your syntax.

In your global.cfg set the filter to 0 and in the filter add in the weight

REMOTEIP -5 IS xxx.xxx.xxx.xxx

This way you can do different ip's with different weights.

Darrell
-------------------------------------------
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Download it today - http://www.invariantsystems.com

----- Original Message ----- From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Wednesday, October 12, 2005 6:46 PM
Subject: [Declude.JunkMail] External Filter - Can we check the sender's IP address?


I know that you can make your own filters with the PRO version. I'd like to check to see if the message is coming from a certain IP address - if it is I want to subtract 5 from the weight. Is this how I do it?

FILTERFILE.txt
----------------------
REMOTEIP      IS      xxx.xxx.xxx.xxx



GLOBAL.CFG FILE
-----------------------
MYFILTER   filter   C:\Imail\Declude\filterfile.txt   x   -5   0

---
[This E-mail was scanned for viruses.]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to