Hi Jim, So, you searched for "to" on a single line in your phrase file and you didn't find it.
We had a case, that an invisible control character after the word was interpreted as CR/LF by IMail. Try to find other "to" as a member of a different phrase, eg. "to many spam" and replace the spaces again with a space. You never know. Try to find also " to" and "to " and " to ", each on a single line. We had something similar last week. I was interrupted by a phone call and i forget to delete some trash in the file after composing a new phrase. After that, the word "net " was a phrase for about 10 Minutes. We received a few false positives. ============================================ Am Mittwoch, 22. Dezember 2004 um 17:16 schrieben Sie: > Good Morning to all and Merry Christmas / Happy Holidays > I'm hoping someone can show me the error of my ways. I read awhile back on > the Imail > Forum List that if one copies/merges the URL black list with the Phrase list, > this would > help with catching spam...AND IT DOES. My problem is, now it's catching more > legit > email too. I look at the Header info for some of the legit email and then I > do a search > on the phrase-list file to see if I can find and remove the word/phrase that > is catching > the email(s), but I'm unable to find it. Below is a copy of a legit piece of > email that > was sent from Infoworld, that was caught by our Phrase List filter. > X-IMAIL-SPAM-PHRASE: (81b574f700def575, to) > I've tried to do a search on the above in () excluding the comma and the TO, > but > again unable to locate this in our Phrase-List.txt file. > Could someone show me where I'm going wrong and put me on the right path. > Any and all help would greatly be appreciated. > Thank-You, > jim > Received: from infoworld.wc09.net [63.214.0.204] by tory.adsnet.com with ESMTP > (SMTPD32-8.14) id A1B574F700DE; Wed, 15 Dec 2004 12:25:57 -0600 > Received: from nile.whatcounts.com (192.168.0.50) by infoworld.wc09.net > (PowerMTA(TM) > v2.0r13) id ho20bo054e4j; Wed, 15 Dec 2004 10:12:37 -0800 (envelope-from ) > From: Advice Line > To: [EMAIL PROTECTED] > Subject: InfoWorld: Initiatives si. Fads no. > Date: 15 Dec 2004 10:16:43 PST > Reply-To: Advice Line > MIME-version: 1.0 > Content-type: text/html; charset=utf-8 > X-Mailer: WhatCounts > Message-Id: <[EMAIL PROTECTED]> > X-IMAIL-SPAM-PHRASE: (81b574f700def575, to) > X-RCPT-TO: > Status: R > X-IMail-Rule: H~X-IMAIL-SPAM-PHRASE:spamphrase Data- X-IMAIL-SPAM-PHRASE: > (81B574F7 > X-UIDL: 379103053 > ............................................................. > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ============================================ -- Mit freundlichen Gr�ssen -------------------------------------------- Merlin Consulting Martin Schaible Bahnhofstrasse 27 CH-8702 Zollikon Phone: +41 1 391 30 00 Fax: +41 1 391 32 49 Mail: mailto:[EMAIL PROTECTED] URL: http://www.merlinconsulting.ch Support: http://support.merlinconsulting.ch GPS: N47 20.235 E8 34.226 -------------------------------------------- News - Neue Produkte: .:. Kiwi Syslog Monitor .:. Paessler GmbH .:. Sawmill Loganalyzer -------------------------------------------- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
