Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Scott Fisher
Come on is my poker face that bad? - Original Message - From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]> To: Sent: Sunday, October 23, 2005 11:43 AM Subject: Re: [Declude.JunkMail] found something new to me I would wager that is a filter he has that lists the common dial-up re

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Scott Fisher
That is one test. - Original Message - From: "Travis Sullivan" <[EMAIL PROTECTED]> To: Sent: Sunday, October 23, 2005 11:12 AM Subject: Re: [Declude.JunkMail] found something new to me I want to use combo filtering with testsfailed to further punish emails that fail two or more of th

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Serge
Are you trying to score a hit if the message failed all 3 tests? Yes. but why the > (sybmol afterwords, what is that telling declude to process?) Should not be there, disregard. So, in the example above, say test name is combo-sc-sbl-xbl and info resides in the combo-sc-sbl-xbl.txt filter

Re: [Declude.JunkMail] cmdspace command

2005-10-23 Thread Darrell \([EMAIL PROTECTED])
Just one bit of clarification - when I used the word "known issue" it was in the sense that the issue is within the outlook software and not Declude. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue M

Re: [Declude.JunkMail] cmdspace command

2005-10-23 Thread Darrell \([EMAIL PROTECTED])
Travis, This is a known issue - you should auth / whitelist auth all of your local clients that connect/send email through your mail server. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitori

Re: [Declude.JunkMail] cmdspace command

2005-10-23 Thread Travis Sullivan
sorry...sent too soon!! declude 1.82 ms-outlook express win xp cmdspace scores a hit... here are my headers: Received: from elanore [68.112.10.238] by cobra.simplecom.net with ESMTP (SMTPD32-7.15) id A979C31E00E8; Sun, 23 Oct 2005 15:58:33 -0500 Message-ID: <[EMAIL PROTECTED]> From: "Tr

[Declude.JunkMail] cmdspace command

2005-10-23 Thread Travis Sullivan
declude 1.82 ms-outlook express win xp cmdspace scores a hit... here are my headers: - Original Message - From: "Serge" <[EMAIL PROTECTED]> To: Sent: Sunday, October 23, 2005 1:50 PM Subject: Re: [Declude.JunkMail] found something new to me Matt said: is very easy to do using a di

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Travis Sullivan
TESTSFAILED END NOTCONTAINS SPAMCOP TESTSFAILED END NOTCONTAINS SBL TESTSFAILED 0 CONTAINS XBL> Explain the theory of this to me, please. stop testing if the test doesn't contain spamcop, or sbl, but zero if contains xbl Are you trying to score a

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Serge
Matt said: this is very easy to do using a different approach. For instance, if you wanted to filter for something that failed both SPAMCOP and XBL (and anything else), you could do so as follows: TESTSFAILED END NOTCONTAINS SPAMCOP TESTSFAILED 0 CONTAINS XBL>

RE: [Declude.JunkMail] found something new to me

2005-10-23 Thread Markus Gufler
> I want to use combo filtering with testsfailed to further > punish emails that fail two or more of the reliable tests. Travis, I do a similar thing for a long time now and I'm very happy with the following solution: 1.) create a new filter test COMBO-IP4R: COMBO-IP4R filter C:\IMail\Declude

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Nick Hayer
Travis Sullivan wrote: Excellent, now I am getting somewhere :) One more thing, are you sure of the filter order listing in the global.cfg file? Yes the filters fire in the global cfg order. Filters also fire after external tests and the dns based tests. If you run in debug for a few emai

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Travis Sullivan
Excellent, now I am getting somewhere :) One more thing, are you sure of the filter order listing in the global.cfg file? Travis - Original Message - From: "Nick Hayer" <[EMAIL PROTECTED]> To: Sent: Sunday, October 23, 2005 12:09 PM Subject: Re: [Declude.JunkMail] found something n

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Nick Hayer
Hi Travis - That looks correct - and is how I do mine. One suggestion though - the first line in the filter should be SKIPIFWEIGHT The idea is here is to prevent a filter from firing needlessly, Along that same idea - filters execute in the order they are listed in your global cfg. So an

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Darrell \([EMAIL PROTECTED])
I would wager that is a filter he has that lists the common dial-up revdns patterns. Example: REVDNS 3 ENDSWITH .client.comcast.net REVDNS 2 STARTSWITH adsl- REVDNS 2 STARTSWITH pool- REVDNS 2 STARTSWITH cdm- REVDNS 3 STARTSWITH dialup- REVDNS 3 STARTSWITH cpe- REVDNS 3 CONTAINS .dialup. The h

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Travis Sullivan
Will this work (just an example, scoring and test names)? GLOBAL.CFG COMBO filter E:\IMail\Declude\combo.txtx 0 0 # COMBO.TXT MINWEIGHTTOFAIL 3 MAXWEIGHT 9 TESTSFAILED 1 CONTAINS REVDNS TESTSFAILED 1 CONTAINS BODYSCAN TESTSFAILED 1 CONTAINS SBL TESTSFAILED 1 CONTAINS SPA

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Travis Sullivan
I want to use combo filtering with testsfailed to further punish emails that fail two or more of the reliable tests. If I could get started with the correct format, I can build it from there. In scotts example: TESTSFAILED 32 CONTAINS REVDNS-DUL-KEYWORDS what is the purpse of the hyphens seper

Re: [Declude.JunkMail] found something new to me

2005-10-23 Thread Darrell \([EMAIL PROTECTED])
Travis, The one thing to keep in mind is that "TESTSFAILED" is a variable that lists the tests that failed. The order of the TESTSFAILED line as you know is dependent on which tests failed. Essentially for a one line in the filter to try and list two tests names would be difficult to hit on.