RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Can we request a STOP function that woul dstop the filter and exit with the current weight? - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Friday, November 17, 2006 9:05 AM Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com -- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Andy, The post says it's actually set up right now so that: [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. Which means that Scott may have changed it, checking the release notes for 1.77 JM ADD filter test type now can have END in place of the weight (any match will 'turn off' test) We certainly have not changed the code. I have added the STOP suggestion to our wishlist David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
me too. I thought the purpose of the end function was so that if the email reaches a certain weight, like 50, declude drops any further tests, thus saving precious CPU. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 4:42 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Darn - I got burned. Some interims release in 2004 changed the END behavior - where it stopped carrying over the weight: http://www.mail-archive.com/declude.junkmail@declude.com/msg20850.html This behavior makes NO sense at all. But now that I've upgraded Imail and Declude there's no way going back. For now I'll have to work around it and change my filters. Yes, if the 'END' now behaves like a 'CANCEL', then we need a 'STOP' directive to restore the previous capability of using filters to simulate and/or conditions in a somewhat efficient manner. This is a huge gotcha! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Friday, November 17, 2006 10:33 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Can we request a STOP function that woul dstop the filter and exit with the current weight? - Original Message - From: David mailto:[EMAIL PROTECTED] Barker To: declude.junkmail@declude.com Sent: Friday, November 17, 2006 9:05 AM Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Hi Craig, no actually, that you CAN accomplish with the SKIPIFWEIGHT 20 MAXWEIGHT 9 directives at the beginning of the filter. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Friday, November 17, 2006 10:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High me too. I thought the purpose of the end function was so that if the email reaches a certain weight, like 50, declude drops any further tests, thus saving precious CPU. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 4:42 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
The purpose of the END function was so that you could make some portion of a filter conditional. It was not meant to be a start of filter directive, it was meant to be usable anywhere in the filter... In fact, in the 2003 post Scott was musing that he might change the fact that it's not counting the test as triggered - but in September 2004 users apparently found out that instead it was made worse by resetting the weight as well. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Friday, November 17, 2006 10:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High me too. I thought the purpose of the end function was so that if the email reaches a certain weight, like 50, declude drops any further tests, thus saving precious CPU. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 4:42 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Nope, never was that way. You want to use MAXWEIGHT for that. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Friday, November 17, 2006 7:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High me too. I thought the purpose of the end function was so that if the email reaches a certain weight, like 50, declude drops any further tests, thus saving precious CPU. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 4:42 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
END still works the way Scott intended it to work, ENDs the filter at that point with no fail. No need to add STOP. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 7:53 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Andy, The post says it's actually set up right now so that: [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. Which means that Scott may have changed it, checking the release notes for 1.77 JM ADD filter test type now can have END in place of the weight (any match will 'turn off' test) We certainly have not changed the code. I have added the STOP suggestion to our wishlist David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Was never changed. Look at the directives. END means end the filter. What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 7:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Just because it's the way the Scott wanted it, doesn't mean there isn't room for improvement. Especially when he changed the functionality of it mid-stream. I'd still like the STOP option. - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, November 17, 2006 10:33 AM Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? END still works the way Scott intended it to work, ENDs the filter at that point with no fail. No need to add STOP. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 7:53 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Andy, The post says it's actually set up right now so that: [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. Which means that Scott may have changed it, checking the release notes for 1.77 JM ADD filter test type now can have END in place of the weight (any match will 'turn off' test) We certainly have not changed the code. I have added the STOP suggestion to our wishlist David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list
Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
The END functionality was changed over a year ago. (I couldn't get to the release notes to check when) When I first started using end, it would end the filter and return the current weight of the filter. - Original Message - From: John T (Lists) To: declude.junkmail@declude.com Sent: Friday, November 17, 2006 10:34 AM Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Was never changed. Look at the directives. END means end the filter. What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 7:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com -- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4 and test5, if test3 is not true. SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 TESTSFAILED END CONTAINS test3 TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Please demonstrate how MAXWEIGHT or STOPATFIRSTHIT would do this in a single filter? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 11:34 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Was never changed. Look at the directives. END means end the filter. What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 7:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
No need to add STOP. Cool, then please educate me on how do you do this in a single filter: SKIPIFWEIGHT 20 MAXWEIGHT 3 #these weights will be always be added (if contains is true) TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 # do not add more weight if test3 triggered TESTSFAILED STOP CONTAINS test3 # these weights will only be added if test3 did not trigger TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 11:33 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? END still works the way Scott intended it to work, ENDs the filter at that point with no fail. No need to add STOP. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 7:53 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Andy, The post says it's actually set up right now so that: [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. Which means that Scott may have changed it, checking the release notes for 1.77 JM ADD filter test type now can have END in place of the weight (any match will 'turn off' test) We certainly have not changed the code. I have added the STOP suggestion to our wishlist David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
That link only shows that Scott was thinking of changing it from 0 weight to a fail which would have added the weight. That explains his point 3 in that what ever the weight of the message was before the test will remain. Remember, to add weight, the test must FAIL. He stated it did not FAIL and therefore weight was never added. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 9:29 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4 and test5, if test3 is not true. SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 TESTSFAILED END CONTAINS test3 TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Please demonstrate how MAXWEIGHT or STOPATFIRSTHIT would do this in a single filter? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 11:34 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Was never changed. Look at the directives. END means end the filter. What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 7:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Hi John, you read it that way? It's actually set up right now so that [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. If I read it, [1] and [3] (which is that the weight will be what it was when END was reached) are stated as fact - and it regarding [2] (that the test did NOT fail) he said this may change. My reading is, that the possible change that the NOT fail might be changed to a fail? Am I reading it wrong? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 01:05 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? That link only shows that Scott was thinking of changing it from 0 weight to a fail which would have added the weight. That explains his point 3 in that what ever the weight of the message was before the test will remain. Remember, to add weight, the test must FAIL. He stated it did not FAIL and therefore weight was never added. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 9:29 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4 and test5, if test3 is not true. SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 TESTSFAILED END CONTAINS test3 TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Please demonstrate how MAXWEIGHT or STOPATFIRSTHIT would do this in a single filter? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 11:34 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Was never changed. Look at the directives. END means end the filter. What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 7:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Why the requirement of single filter? Clarity? It's easier for me to follow a logic, if it's enclosed in a SINGLE source document (= filter). If the logical is spread over multiple source documents, I have to first scour the Global.CFG to see which filters are active, then inspect each one to see if by chance any one of them might have any effect. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 12:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? I have different combo filters created like this: ComboFilterA REM If testa and testb fail, and if testc or testd fail, add 10 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testa TESTSFAILED END NOTCONTAINS testb TESTSFAILED 10 CONTAINS testc TESTSFAILED 10 CONTAINS testd ComboFilterB REM If testc and testd fail, and if teste or testf fail, add 20 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testc TESTSFAILED END NOTCONTAINS testd TESTSFAILED 10 CONTAINS teste TESTSFAILED 10 CONTAINS testf IMHO, that is a much cleaner and neater way to do it. You could also use MAXWEIGHT instead of ENDONFIRSTHIT and then assign different weights to different test. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 9:29 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4 and test5, if test3 is not true. SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 TESTSFAILED END CONTAINS test3 TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Please demonstrate how MAXWEIGHT or STOPATFIRSTHIT would do this in a single filter? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Any filter that I do not have as active is moved to \declude\filters\notused from \declude\filtes so that my filters folder only contains filters that I am currently using. In your example, you are putting the IF statement after the THEN statement. I am not a programmer, but IF (the test of what you want to be quantified) always comes before THEN (the result you want to occur depending upon whether the test of the quantification failed or passed, meaning did it meat the criteria which is the defined IF statement), so the first part of your example does not make any sense. You only want weight added if test3 failed, so you have to quantify that FIRST and then say what occurs by adding weight. So, you have to have to filters since both sections rely upon testing IF test3 has failed or not. What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:48 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? Clarity? It's easier for me to follow a logic, if it's enclosed in a SINGLE source document (= filter). If the logical is spread over multiple source documents, I have to first scour the Global.CFG to see which filters are active, then inspect each one to see if by chance any one of them might have any effect. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 12:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? I have different combo filters created like this: ComboFilterA REM If testa and testb fail, and if testc or testd fail, add 10 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testa TESTSFAILED END NOTCONTAINS testb TESTSFAILED 10 CONTAINS testc TESTSFAILED 10 CONTAINS testd ComboFilterB REM If testc and testd fail, and if teste or testf fail, add 20 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testc TESTSFAILED END NOTCONTAINS testd TESTSFAILED 10 CONTAINS teste TESTSFAILED 10 CONTAINS testf IMHO, that is a much cleaner and neater way to do it. You could also use MAXWEIGHT instead of ENDONFIRSTHIT and then assign different weights to different test. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 9:29 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4 and test5, if test3 is not true. SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 TESTSFAILED END CONTAINS test3 TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Please demonstrate how MAXWEIGHT or STOPATFIRSTHIT would do this in a single filter? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Andy, Using 'combo' filters is the way to go here. It does work, and while extra functionality would ease such things, I have always been required to work within the framework and as a result I use many sets of combo filters to do exactly what you were trying to do here in one file. It is good that END results in no hit for the filter. If this changed, it would screw up my system in a big way, and probably result in me blocking virtually all legitimate E-mail. There is a definite need for a function that aborts a filter entirely, and this is what Scott provided with END. A STOP function would not be a bad idea, and to create ABORT in the place of END (same thing, different name), and depricating END as Andrew suggested in 2004 would make sense as far as confusion goes and also to add extra functionality, but that is in fact a feature request. Matt Andy Schmidt wrote: Why the requirement of single filter? Clarity? It's easier for me to follow a logic, if it's enclosed in a SINGLE source document (= filter). If the logical is spread over multiple source documents, I have to first scour the Global.CFG to see which filters are active, then inspect each one to see if by chance any one of them might have any effect. Best Regards */Andy Schmidt/*/ / Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *John T (Lists) *Sent:* Friday, November 17, 2006 12:57 PM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? I have different combo filters created like this: ComboFilterA REM If testa and testb fail, and if testc or testd fail, add 10 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testa TESTSFAILED END NOTCONTAINS testb TESTSFAILED 10 CONTAINS testc TESTSFAILED 10 CONTAINS testd ComboFilterB REM If testc and testd fail, and if teste or testf fail, add 20 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testc TESTSFAILED END NOTCONTAINS testd TESTSFAILED 10 CONTAINS teste TESTSFAILED 10 CONTAINS testf IMHO, that is a much cleaner and neater way to do it. You could also use MAXWEIGHT instead of ENDONFIRSTHIT and then assign different weights to different test. **John T** **eServices For You** *Life is a succession of lessons which must be lived to be understood.* *Ralph Waldo Emerson (1802-1882)* ** -Original Message- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Andy Schmidt *Sent:* Friday, November 17, 2006 9:29 AM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4 and test5, if test3 is not true. SKIPIFWEIGHT 20 MAXWEIGHT 3 TESTSFAILED 1 CONTAINS test1 TESTSFAILED 1 CONTAINS test2 TESTSFAILED END CONTAINS test3 TESTSFAILED 1 CONTAINS test4 TESTSFAILED 1 CONTAINS test5 etc etc Please demonstrate how MAXWEIGHT or STOPATFIRSTHIT would do this in a single filter? Best Regards */Andy Schmidt/*/ / Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Hi John: What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? If you have several blacklists of the same family (e.g., multiple open-relay filters, or multiple open-proxy filters) I like to group them together. I give a big weight to the entire group (the filter itself) and then may add an increment for blacklists with few false positives (each contains clause). Simiarly with Sniffer or invURIBL. There is some overlap between those two, and there is a potential overlap between Sniffer-IP and blacklists of recent spam sources (e.g., SpamCop, MXRate-Block). I have a filter that processes my various Sniffer types and invURIBL returns. At some point, I'd like to stop and first look if certain other Blacklist Tests had fired. If so, I'm done. If not, I want to add a little extra for Sniffer-IP. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 02:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Any filter that I do not have as active is moved to \declude\filters\notused from \declude\filtes so that my filters folder only contains filters that I am currently using. In your example, you are putting the IF statement after the THEN statement. I am not a programmer, but IF (the test of what you want to be quantified) always comes before THEN (the result you want to occur depending upon whether the test of the quantification failed or passed, meaning did it meat the criteria which is the defined IF statement), so the first part of your example does not make any sense. You only want weight added if test3 failed, so you have to quantify that FIRST and then say what occurs by adding weight. So, you have to have to filters since both sections rely upon testing IF test3 has failed or not. What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:48 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? Clarity? It's easier for me to follow a logic, if it's enclosed in a SINGLE source document (= filter). If the logical is spread over multiple source documents, I have to first scour the Global.CFG to see which filters are active, then inspect each one to see if by chance any one of them might have any effect. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 12:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? I have different combo filters created like this: ComboFilterA REM If testa and testb fail, and if testc or testd fail, add 10 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testa TESTSFAILED END NOTCONTAINS testb TESTSFAILED 10 CONTAINS testc TESTSFAILED 10 CONTAINS testd ComboFilterB REM If testc and testd fail, and if teste or testf fail, add 20 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testc TESTSFAILED END NOTCONTAINS testd TESTSFAILED 10 CONTAINS teste TESTSFAILED 10 CONTAINS testf IMHO, that is a much cleaner and neater way to do it. You could also use MAXWEIGHT instead of ENDONFIRSTHIT and then assign different weights to different test. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 9:29 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John, Was never changed. Please read the URL I posted: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html As you can tell, ORIGINALLY it did return the weight. He was thinking of it even FAILING the test (if there was a weight). What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. Kindly, please read the sample I had posted (bottom of this message). Your reply doesn't address the issue of trying to make some sections of a test conditional. Example, the goal is to return either 1 or 2 or 3 if test1 or test2 occur with test3 - and to only add test4
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
OK, I understand that better but you will always be better off grouping each intent into a different combo filter. Then, you can even have a combo filter dependent upon another combo filter by why of order of list and including the name of the combo filter as an IF statement in the next one. Combo filters need to be viewed as a different type of test rather than a normal filter test. If you write down in groups want you want to do, it will be easy to then create them. Say if you want to add 12 if 4 or more rbl tests failed. You would create a combo filter like this: MINWEIGHTTOFAIL12 MAXWEIGHT12 TESTSFAILED 3CONTAINS rbl1 TESTSFAILED 3CONTAINS rbl2 TESTSFAILED 3CONTAINS rbl3 TESTSFAILED 3CONTAINS rbl4 TESTSFAILED 3CONTAINS rbl5 TESTSFAILED 3CONTAINS rbl6 TESTSFAILED 3CONTAINS rbl7 TESTSFAILED 3CONTAINS rbl8 That way, at least 4 have to hit to equal 12 before it will see this test as failing, but it will only add 12 and not more. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 2:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John: What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? If you have several blacklists of the same family (e.g., multiple open-relay filters, or multiple open-proxy filters) I like to group them together. I give a big weight to the entire group (the filter itself) and then may add an increment for blacklists with few false positives (each contains clause). Simiarly with Sniffer or invURIBL. There is some overlap between those two, and there is a potential overlap between Sniffer-IP and blacklists of recent spam sources (e.g., SpamCop, MXRate-Block). I have a filter that processes my various Sniffer types and invURIBL returns. At some point, I'd like to stop and first look if certain other Blacklist Tests had fired. If so, I'm done. If not, I want to add a little extra for Sniffer-IP. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 02:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Any filter that I do not have as active is moved to \declude\filters\notused from \declude\filtes so that my filters folder only contains filters that I am currently using. In your example, you are putting the IF statement after the THEN statement. I am not a programmer, but IF (the test of what you want to be quantified) always comes before THEN (the result you want to occur depending upon whether the test of the quantification failed or passed, meaning did it meat the criteria which is the defined IF statement), so the first part of your example does not make any sense. You only want weight added if test3 failed, so you have to quantify that FIRST and then say what occurs by adding weight. So, you have to have to filters since both sections rely upon testing IF test3 has failed or not. What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:48 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? Clarity? It's easier for me to follow a logic, if it's enclosed in a SINGLE source document (= filter). If the logical is spread over multiple source documents, I have to first scour the Global.CFG to see which filters are active, then inspect each one to see if by chance any one of them might have any effect. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 12:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? I have different combo filters created like this: ComboFilterA REM If testa and testb fail, and if testc or testd fail, add 10 ENDONFIRSTHIT TESTSFAILED END NOTCONTAINS testa TESTSFAILED END NOTCONTAINS
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
I'm familiar with MAXWEIGHT and I'm using it. It doesn't address this particular application. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 05:52 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? OK, I understand that better but you will always be better off grouping each intent into a different combo filter. Then, you can even have a combo filter dependent upon another combo filter by why of order of list and including the name of the combo filter as an IF statement in the next one. Combo filters need to be viewed as a different type of test rather than a normal filter test. If you write down in groups want you want to do, it will be easy to then create them. Say if you want to add 12 if 4 or more rbl tests failed. You would create a combo filter like this: MINWEIGHTTOFAIL12 MAXWEIGHT12 TESTSFAILED 3CONTAINS rbl1 TESTSFAILED 3CONTAINS rbl2 TESTSFAILED 3CONTAINS rbl3 TESTSFAILED 3CONTAINS rbl4 TESTSFAILED 3CONTAINS rbl5 TESTSFAILED 3CONTAINS rbl6 TESTSFAILED 3CONTAINS rbl7 TESTSFAILED 3CONTAINS rbl8 That way, at least 4 have to hit to equal 12 before it will see this test as failing, but it will only add 12 and not more. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 2:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John: What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? If you have several blacklists of the same family (e.g., multiple open-relay filters, or multiple open-proxy filters) I like to group them together. I give a big weight to the entire group (the filter itself) and then may add an increment for blacklists with few false positives (each contains clause). Simiarly with Sniffer or invURIBL. There is some overlap between those two, and there is a potential overlap between Sniffer-IP and blacklists of recent spam sources (e.g., SpamCop, MXRate-Block). I have a filter that processes my various Sniffer types and invURIBL returns. At some point, I'd like to stop and first look if certain other Blacklist Tests had fired. If so, I'm done. If not, I want to add a little extra for Sniffer-IP. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 02:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Any filter that I do not have as active is moved to \declude\filters\notused from \declude\filtes so that my filters folder only contains filters that I am currently using. In your example, you are putting the IF statement after the THEN statement. I am not a programmer, but IF (the test of what you want to be quantified) always comes before THEN (the result you want to occur depending upon whether the test of the quantification failed or passed, meaning did it meat the criteria which is the defined IF statement), so the first part of your example does not make any sense. You only want weight added if test3 failed, so you have to quantify that FIRST and then say what occurs by adding weight. So, you have to have to filters since both sections rely upon testing IF test3 has failed or not. What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:48 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Why the requirement of single filter? Clarity? It's easier for me to follow a logic, if it's enclosed in a SINGLE source document (= filter). If the logical is spread over multiple source documents, I have to first scour the Global.CFG to see which filters are active, then inspect each one to see if by chance any one of them might have any effect. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto
Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Andy, Taking your original filter, this is what you would do (note the NOTCONTAINS line in the second filter): # ADD-WEIGHT TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 - # EXTRA-WEIGHT TESTSFAILED END NOTCONTAINS ADD-WEIGHT TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP In your Global.cfg, you would only need to make sure that ADD-WEIGHT appear before EXTRA-WEIGHT. Matt Andy Schmidt wrote: I'm familiar with MAXWEIGHT and I'm using it. It doesn't address this particular application. Best Regards */Andy Schmidt/*/ / Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *John T (Lists) *Sent:* Friday, November 17, 2006 05:52 PM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? OK, I understand that better but you will always be better off grouping each intent into a different combo filter. Then, you can even have a combo filter dependent upon another combo filter by why of order of list and including the name of the combo filter as an IF statement in the next one. Combo filters need to be viewed as a different type of test rather than a normal filter test. If you write down in groups want you want to do, it will be easy to then create them. Say if you want to add 12 if 4 or more rbl tests failed. You would create a combo filter like this: MINWEIGHTTOFAIL12 MAXWEIGHT12 TESTSFAILED 3CONTAINS rbl1 TESTSFAILED 3CONTAINS rbl2 TESTSFAILED 3CONTAINS rbl3 TESTSFAILED 3CONTAINS rbl4 TESTSFAILED 3CONTAINS rbl5 TESTSFAILED 3CONTAINS rbl6 TESTSFAILED 3CONTAINS rbl7 TESTSFAILED 3CONTAINS rbl8 That way, at least 4 have to hit to equal 12 before it will see this test as failing, but it will only add 12 and not more. **John T** **eServices For You** *Life is a succession of lessons which must be lived to be understood.* *Ralph Waldo Emerson (1802-1882)* ** -Original Message- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Andy Schmidt *Sent:* Friday, November 17, 2006 2:13 PM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi John: What is the logic of the second part anyways, to add weight for test4 and test5 IF test1 and test2 failed? If you have several blacklists of the same family (e.g., multiple open-relay filters, or multiple open-proxy filters) I like to group them together. I give a big weight to the entire group (the filter itself) and then may add an increment for blacklists with few false positives (each contains clause). Simiarly with Sniffer or invURIBL. There is some overlap between those two, and there is a potential overlap between Sniffer-IP and blacklists of recent spam sources (e.g., SpamCop, MXRate-Block). I have a filter that processes my various Sniffer types and invURIBL returns. At some point, I'd like to stop and first look if certain other Blacklist Tests had fired. If so, I'm done. If not, I want to add a little extra for Sniffer-IP. Best Regards */Andy Schmidt/*/ / Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *John T (Lists) *Sent:* Friday, November 17, 2006 02:41 PM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Any filter that I do not have as active is moved to \declude\filters\notused from \declude\filtes so that my filters folder only contains filters that I am currently using. In your example, you are putting the IF statement after the THEN statement. I am not a programmer
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
Yes, thanks Matt. Obviously, that's how I worked around it when I first notice this issue this morning (to two filters with proper placement in the Global.cfg.) For simplicity of maintenance and for easier comprehension down the road, I still hope that a STOP directive will be added so that this circumvention won't be necessary any more. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, November 17, 2006 08:53 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Andy, Taking your original filter, this is what you would do (note the NOTCONTAINS line in the second filter): # ADD-WEIGHT TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 - # EXTRA-WEIGHT TESTSFAILED END NOTCONTAINS ADD-WEIGHT TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP In your Global.cfg, you would only need to make sure that ADD-WEIGHT appear before EXTRA-WEIGHT. Matt --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
