RE: [Declude.JunkMail] Content repetition and weighting

2003-12-31 Thread George Kulman 
Mike,

If you use LOGLEVEL HIGH, the actual match will show in the JunkMail log.

George

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Mike Gable
> Sent: Wednesday, December 31, 2003 11:59 AM
> To: Declude (E-mail 2)
> Subject: [Declude.JunkMail] Content repetition and weighting
> 
> 
> If a weight is applied to filtered content in the body of a 
> message, does
> the weight accumulate if the filtered item is repeated? I 
> have a filter
> thus:
> 
> BODY 1 CONTAINS ;

> 
> Messages from some Asian country (Russia?), which looks like this:
> "???", leak through my filter file despite having 
> dozens or hundreds
> of instances of this text combination ";
" in the html body of the
> message. I was hoping that if the item repeats enough times 
> the accumulted
> score would push it into the threshold score for hold or 
> delete, but this
> does not seem to be the case.
> 
> Also, is there a way for Declude to include the actual 
> filtered item in the
> X-Declude headers of the message instead of just the line 
> number of the
> filtered item in the filter file? My filter file has hundreds 
> of lines and
> it's almost impossible to identify what line it is matching on.
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Content repetition and weighting

2003-12-31 Thread R. Scott Perry 

If a weight is applied to filtered content in the body of a message, does
the weight accumulate if the filtered item is repeated? I have a filter
thus:
BODY 1 CONTAINS ;


Messages from some Asian country (Russia?), which looks like this:
"???", leak through my filter file despite having dozens or hundreds
of instances of this text combination ";
" in the html body of the
message. I was hoping that if the item repeats enough times the accumulted
score would push it into the threshold score for hold or delete, but this
does not seem to be the case.
You are correct.  Only the first instance is counted.  We may later expand 
the filtering to offer a way to allow multiple hits to be counted.

Also, is there a way for Declude to include the actual filtered item in the
X-Declude headers of the message instead of just the line number of the
filtered item in the filter file? My filter file has hundreds of lines and
it's almost impossible to identify what line it is matching on.
That isn't possible at this time, but something that we are looking into 
adding.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.