On Thursday, July 1, 2004, 2:54:18 AM, Roelof Otten wrote:

> Please, paste the filter in a message and paste the headers of one of
> your false positives in the same message, that makes comparing a bit
> easier.

Sorry, I did not know how to paste the fileter.  Here it is:

BeginFilter
Name: Not to Me
Active: 1
Source: \\Jim's Mail\Inbox
Target: \\Jim's Mail\$JUNK$
CopyFolder: \\\\none
MainSet: [EMAIL PROTECTED]
MainSet: 01yahoogroups.com
MainSet: 01projo.com
MainSet: 01longspeakbsa.org
Actions: 
AddGroups: 
DelGroups: 
ForwardTemplate: 
ConfirmTemplate: 
ReplyTemplate: 
FwdAddr: 
RedirectAddr: 
NewAddr: 
NewTemplate: 
ExtCmd: 
ExtFile: 
ExtractDir: 
ColourGroup: <default>
AddAddrItems: afiFrom,
DelAddrItems: afiFrom,
HotKey: 0
IsOfColour: <default>
SizeBigger: 0
SizeSmaller: 0
AgeOlder: 0
AgeNewer: 0
InAddrPos: 0
OutAddrPos: 0
InAddrGroups: 
NoAddrGroups: 
KillFile: 
KillMethod: 0
SaveTemplate: 
SndFile: 
SysSound: 0
SoundTime: 0:00-0:00
AllowTime: 0:00-0:00
EndFilter

Here are the headers from a false positive:

X-McAfeeVS-TimeoutProtection: 19
Received: from n34.grp.scd.yahoo.com ([66.218.66.102])
          by rwcrmxc13.comcast.net (rwcrmxc13) with SMTP
          id <20040701032100r1300qil6te>; Thu, 1 Jul 2004 03:21:00 +0000
X-Originating-IP: [66.218.66.102]
X-eGroups-Return: [EMAIL PROTECTED]
Received: from [66.218.66.31] by n34.grp.scd.yahoo.com with NNFMP; 01 Jul 2004 
03:20:27 -0000
Received: (qmail 21994 invoked from network); 1 Jul 2004 03:20:25 -0000
Received: from unknown (66.218.66.217)
  by m25.grp.scd.yahoo.com with QMQP; 1 Jul 2004 03:20:25 -0000
Received: from unknown (HELO n19.grp.scd.yahoo.com) (66.218.66.74)
  by mta2.grp.scd.yahoo.com with SMTP; 1 Jul 2004 03:20:25 -0000
X-eGroups-Return: [EMAIL PROTECTED]
Received: from [66.218.66.123] by n19.grp.scd.yahoo.com with NNFMP; 01 Jul 2004 
03:19:25 -0000
X-Sender: [EMAIL PROTECTED]
X-Apparently-To: [EMAIL PROTECTED]
Received: (qmail 88010 invoked from network); 1 Jul 2004 00:19:41 -0000
Received: from unknown (66.218.66.218)
  by m16.grp.scd.yahoo.com with QMQP; 1 Jul 2004 00:19:41 -0000
Received: from unknown (HELO mail.iic.com) (64.72.92.8)
  by mta3.grp.scd.yahoo.com with SMTP; 1 Jul 2004 00:19:40 -0000
Received: from mitaca (w126.z066088145.sjc-ca.dsl.cnc.net [66.88.145.126])
        by mail.iic.com (8.12.10/8.12.10) with SMTP id i610IvIe009837;
        Wed, 30 Jun 2004 20:18:57 -0400
To: [EMAIL PROTECTED]
CC: "Sandeep" <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Importance: Normal
In-Reply-To: <[EMAIL PROTECTED]>
X-eGroups-Remote-IP: 64.72.92.8
From: "Mita Desai" <[EMAIL PROTECTED]>
X-Yahoo-Profile: mita0216
X-eGroups-Approved-By: danmurray.rm <[EMAIL PROTECTED]> via web; 01 Jul 2004 03:19:24 
-0000
X-eGroups-Remote-IP: 66.218.66.74
MIME-Version: 1.0
Mailing-List: list [EMAIL PROTECTED]; contact [EMAIL PROTECTED]
Delivered-To: mailing list [EMAIL PROTECTED]
Precedence: bulk
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
Date: Wed, 30 Jun 2004 17:14:13 -0700
Subject: [rmiug-jobs] Winbatch/Windows Position in Boulder
Reply-To: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Thank you.
-- 
Jim McMaster                            
mailto:[EMAIL PROTECTED]

Attachment: pgpM2umowApdw.pgp
Description: PGP signature

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

________________________________________________
Current version is 2.11.02 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to