Bill, I noticed the exact same thing and I found that by not placing a "\" before the brackets causes the filter to act as a unix regex so any character that matches the string in the brackets will test positive.
Try changing the rule to: \[Possible Spam\] Hope this helps. Regards, Steven J. Narro Next Generation Technology, Inc. Phone: 703.866.9890 Fax: 703.866.9891 URL: http://www.ngti.com e-mail: [EMAIL PROTECTED] ---------- Original Message ---------------------------------- From: "Bill Pierson" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Tue, 11 May 2004 17:01:11 -0400 >Greetings >I've recently upgraded to version 8.11, and some crazy things have been >happening, specifically E-Mail started disappearing... > >I was on vacation (chuckle) when the patch first came out, and actually >implemented it yesterday (Monday.) > >I previously set up all of the AntiSpam features to put "[Possible Spam]" in >the subject line, and told users to set up rules in their E-Mail client of >choice to direct those messages into a subfolder for future review, perhaps >if something turned up missing that they were expecting. I've learned the >hard way to not delete E-Mail for any reason - to let the end user >ultimately decide. > >There were a few users, however, that wanted all "[Possible Spam]'s" to be >deleted, so I directed them to set up an inbound rule via the web interface. >I directed them to add a rule stating that if the Subject contained >"[Possible Spam]", delete it. This worked perfectly until I upgraded to >8.11, now it seems to simply delete everything. > >In this scenario, I sent an E-Mail with the subject: TESTING from a remote >E-Mail address. >Inbound X-IMail-Rule: S~[Possible Spam]:NUL Data- ESTING > >Deleted. > >In this one, I sent an E-Mail with the subject: Your New Shoes >Inbound X-IMail-Rule: S~[Possible Spam]:NUL Data- OUR NEW SHOES > >Deleted. > >With the rule in place, you can see that above result. >Both tests make it without the rule in place. >This is with the phrase filtering turned off. > >Any ideas? >Thanks, >--Bill > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > ________________________________________________________________ Sent via the WebMail system at ms1.ngti.com To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
