Yes, as I don’t want to bypass most of the filters listed below. I would want to look to see if there are other tests causing problems for non-spam messages from k12 addresses.
Thanks! From: David Barker Sent: Tuesday, November 18, 2014 2:50 PM To: [email protected] Subject: [MBF] Re: PRE-Test filter change A Bunch.... and for different reasons too. Maybe we just start with Gauntlet and PRE-TESTED and add on a per need (make sense) basis. BETA-001.txt FILTER-ADULT.txt FILTER-BACKSCATTER.txt FILTER-BULK.txt FILTER-COUNTRY.txt FILTER-DRUGS.txt FILTER-EDU.txt FILTER-FINANCE.txt FILTER-FORGED.txt FILTER-GIBBERISH.txt FILTER-INK.txt FILTER-INSURANCE.txt FILTER-LOTTO.txt FILTER-MEDICAL.txt FILTER-NOSENDER.txt FILTER-PHISH.txt FILTER-REPLICA.txt FILTER-SCAM.txt FILTER-SCHEME.txt FILTER-SCRIPTS.txt FILTER-SOFTWARE.txt FILTER-SPAM.txt FILTER-STOCKS.txt FILTER-SUBJECT.txt FILTER-SURVEY.txt FILTER-UNSUBSCRIBE.txt FILTER-ZOMBIE.txt GAUNTLET.txt GOOD-MAILFROM.txt GOOD-REVDNS.txt HAM-INDICATOR.txt IPREP.txt ISP-ADELPHIA.txt ISP-AOL.txt ISP-CHARTER.txt ISP-COMCAST.txt ISP-COXINET.txt ISP-EARTHLINK.txt ISP-GOOGLE.txt ISP-HOTMAIL.txt ISP-VERIZON.txt ISP-YAHOO.txt PRE-TESTED.txt On 11/18/2014 3:38 PM, Scott Fosseen - Prairie Lakes AEA wrote: What filters have “END” in them? From: David Barker Sent: Tuesday, November 18, 2014 2:36 PM To: [email protected] Subject: [MBF] Re: PRE-Test filter change I am thinking I will inlcude it with any Filters that have an END so users can configure their own stops. Don't you think it would be across the board, if you have exceptions to END filters ? On 11/18/2014 3:28 PM, Scott Fosseen - Prairie Lakes AEA wrote: Are there other filters that should end with the NIXIT test. I would not want all, but I could see the Gauntlet filter would have it. From: David Barker Sent: Tuesday, November 18, 2014 1:26 PM To: [email protected] Subject: [MBF] Re: PRE-Test filter change You could do that. It is a great idea. Ill include the format NIXIT so you can create a local filter called NIXIT.txt with your own criteria ? TESTSFAILED END PCRE (NIXIT|GOOD-REVDNS|BONDEDSENDER|IADB|BASE64|SNIFFER|HOSTKARMA-RHSBL-WHITE|SIZE-(1MB|500K)|MAILSPIKE-H[34]) Any reason not to use NIXIT if no-one complains by the end of the day Ill include it. David On 11/18/2014 2:11 PM, Scott Fosseen - Prairie Lakes AEA wrote: Or is this outside the realm of the PRE-TESTED filter, and instead should I create a new filter test USERTEST then just have you update the filter line TESTSFAILED END PCRE (USERTEST|GOOD-REVDNS|BONDEDSENDER|IADB|BASE64|SNIFFER|HOSTKARMA-RHSBL-WHITE|SIZE-(1MB|500K)|MAILSPIKE-H[34]) That way anyone could create their own criteria to bypass the PRE-TESTED filter that would withstand filter updates. From: Scott Fosseen - Prairie Lakes AEA Sent: Tuesday, November 18, 2014 1:04 PM To: [email protected] Subject: [MBF] Re: PRE-Test filter change I am not really good at regex, I put the .+k12\.[a-z]{2}\.us in the regex101.com tester and it did not match on any k12 address I put in. [email protected] [email protected] [email protected] user@under_score.k12.az.us Looking at it I think a new line should be added # Match K12 district addresses MAILFROM END PCRE (?i:@([a-z0-9---_]*\.k12\.[a-z]{2})\.us) What I can not get to match is: [email protected] [email protected] Also would it make sense to add this line? REVDNS END PCRE (?i:([a-z0-9---_]*\.k12\.[a-z]{2})\.us) From: David Barker Sent: Tuesday, November 18, 2014 12:11 PM To: [email protected] Subject: [MBF] Re: PRE-Test filter change Would I be missing anything if we updated it as: .+k12\.[a-z]{2}\.us If you have some email addresses structures I can verify this against that would be great I can update it now. David On 11/18/2014 12:59 PM, Scott Fosseen - Prairie Lakes AEA wrote: I would like to propose updating the pre-test filter by changing this line: MAILFROM END PCRE (?i:@(mta|notify|alert|response|mail|noreply|list|send|bounce|news|shop|List-Unsubscribe|k12|notif|store|state|relay|envfrm)\.) to MAILFROM END PCRE (?i:@(mta|notify|alert|response|mail|noreply|list|send|bounce|news|shop|List-Unsubscribe|[a-z0-9---_]*\.k12\.[a-z]{2}|notif|store|state|relay|envfrm)\.) This would allow school addresses to bypass this filter (I am getting a LOT that are directed to to the Junkmail folder) as the MAILFROM 20 hit most legitimate school email addresses. I am not aware of any users with an @k12 address, -- David Barker Mail’s Best Friend Email : [email protected] Web : www.mailsbestfriend.com Office : 866.919.2075 Mobile : 978.518.6461 -- David Barker Mail’s Best Friend Email : [email protected] Web : www.mailsbestfriend.com Office : 866.919.2075 Mobile : 978.518.6461 -- David Barker Mail’s Best Friend Email : [email protected] Web : www.mailsbestfriend.com Office : 866.919.2075 Mobile : 978.518.6461 -- David Barker Mail’s Best Friend Email : [email protected] Web : www.mailsbestfriend.com Office : 866.919.2075 Mobile : 978.518.6461
