RE: [Declude.JunkMail] Does STOPALLTESTS really stop all tests?
Ok so this is really working how I'd like it to The rule is defined with a global.cfg weight of -1000 If the domain is whitelisted then the -1000 is applied to any non-filter type tests and NO other filters are run. In essence the domain is whitelisted because all of the other non-filter tests I have don't add up to 1000. Sound right? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. > Scott Perry > Sent: Wednesday, December 08, 2004 12:39 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Does STOPALLTESTS really stop > all tests? > > > >I've got a whitelist filter file where I use the action > "STOPALLTESTS": > > > >MAILFROMSTOPALLTESTSCONTAINS@netrends.com > > > >This rule is defined as the first rule in my global.cfg > (above all of > >the IP4r, Catchall, externals, etc.) If it trips the > WHITELIST filter, > >why do the other tests (see declog below) register? > > That's because it is only designed to stop tests that occur > *after* this one. So any non-filter tests will still run, > and any filter tests that are defined before this test will run. > > STOPALLTESTS was designed to minimize CPU usage. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers since 2000. > Declude Virus: Ultra reliable virus detection and the leader > in mailserver vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > This outgoing message is guaranteed to be authentic by > Message Level users. > Guarantee the authenticity of your email @ > http://www.messagelevel.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Does STOPALLTESTS really stop all tests?
I've got a whitelist filter file where I use the action "STOPALLTESTS": MAILFROMSTOPALLTESTSCONTAINS@netrends.com This rule is defined as the first rule in my global.cfg (above all of the IP4r, Catchall, externals, etc.) If it trips the WHITELIST filter, why do the other tests (see declog below) register? That's because it is only designed to stop tests that occur *after* this one. So any non-filter tests will still run, and any filter tests that are defined before this test will run. STOPALLTESTS was designed to minimize CPU usage. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Does STOPALLTESTS really stop all tests?
Filters are run last. - Original Message - From: "Mark E. Smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 08, 2004 11:26 AM Subject: [Declude.JunkMail] Does STOPALLTESTS really stop all tests? > I've got a whitelist filter file where I use the action "STOPALLTESTS": > > MAILFROM STOPALLTESTS CONTAINS @netrends.com > > This rule is defined as the first rule in my global.cfg (above all of the > IP4r, Catchall, externals, etc.) > If it trips the WHITELIST filter, why do the other tests (see declog below) > register? > > -0- > > 12/08/2004 12:00:35 Q3330261c009c1d52 Filter: Set min weight to -1000. > 12/08/2004 12:00:35 Q3330261c009c1d52 Triggered MAILFROM CONTAINS filter > WHITELISTFILTER on @netrends.com [weight->0; @netrends.com]. > 12/08/2004 12:00:35 Q3330261c009c1d52 nIPNOTINMX:-30 nNOLEGITCONTENT:-50 . > Total weight = -80. > 12/08/2004 12:00:35 Q3330261c009c1d52 Using [outgoing] CFG file global.cfg. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed CATCHALLMAILS (). > Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed SIZE-XS (Message failed > SIZE-XS: 12.). Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed MS-WHITE (Message failed > MS-WHITE: 0.). Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed WEIGHTLEGIT (Total weight > between -5000 and 119.). Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 R1 Message OK > 12/08/2004 12:00:35 Q3330261c009c1d52 Subject: testing > 12/08/2004 12:00:35 Q3330261c009c1d52 From: [EMAIL PROTECTED] To: > [EMAIL PROTECTED] IP: 65.196.89.161 ID: > 12/08/2004 12:00:35 Q3330261c009c1d52 Tests failed [weight=-80]: > CATCHALLMAILS=WARN SIZE-XS=WARN MS-WHITE=WARN WEIGHTLEGIT=WARN > 12/08/2004 12:00:35 Q3330261c009c1d52 Last action = IGNORE. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Does STOPALLTESTS really stop all tests?
I've got a whitelist filter file where I use the action "STOPALLTESTS": MAILFROMSTOPALLTESTSCONTAINS@netrends.com This rule is defined as the first rule in my global.cfg (above all of the IP4r, Catchall, externals, etc.) If it trips the WHITELIST filter, why do the other tests (see declog below) register? -0- 12/08/2004 12:00:35 Q3330261c009c1d52 Filter: Set min weight to -1000. 12/08/2004 12:00:35 Q3330261c009c1d52 Triggered MAILFROM CONTAINS filter WHITELISTFILTER on @netrends.com [weight->0; @netrends.com]. 12/08/2004 12:00:35 Q3330261c009c1d52 nIPNOTINMX:-30 nNOLEGITCONTENT:-50 . Total weight = -80. 12/08/2004 12:00:35 Q3330261c009c1d52 Using [outgoing] CFG file global.cfg. 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed CATCHALLMAILS (). Action=WARN. 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed SIZE-XS (Message failed SIZE-XS: 12.). Action=WARN. 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed MS-WHITE (Message failed MS-WHITE: 0.). Action=WARN. 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed WEIGHTLEGIT (Total weight between -5000 and 119.). Action=WARN. 12/08/2004 12:00:35 Q3330261c009c1d52 R1 Message OK 12/08/2004 12:00:35 Q3330261c009c1d52 Subject: testing 12/08/2004 12:00:35 Q3330261c009c1d52 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 65.196.89.161 ID: 12/08/2004 12:00:35 Q3330261c009c1d52 Tests failed [weight=-80]: CATCHALLMAILS=WARN SIZE-XS=WARN MS-WHITE=WARN WEIGHTLEGIT=WARN 12/08/2004 12:00:35 Q3330261c009c1d52 Last action = IGNORE. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
