Hi;
This Comments filter is already working great.  It is catching the trick
quite nicely.  Great job..

Any plan to also add the variation of this trick -- simply:

=2Ecom=2F
http=3A=2F=2F

Or the likes?  These tricks are now causing our URL filters not to be as
effective.

Regards,
Kami

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Tuesday, February 04, 2003 10:00 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude JunkMail v1.67 (beta) released



> > The test is defined in the global.cfg file as follows:
> >
> >        COMMENTS  comments  5  x  10  0
> >
> > where the "5" means that 5 such comments have to be encountered (the 
> > 10 is the weight that will be added for E-mail that fails the test).  
> > Alternatively, you can use:
> >
> >        COMMENTS  comments  weight  x  10  0
>
>OK, I must not be thinking correctly.
>
>I understand the first example but I'm confused on the second example. 
>If I wanted to add 5 for every comment line found in a message, and the 
>weight of the test is 10, wouldn't I put the number 5 where the word 
>weight is, thereby making the two comment lines identical?

The formula for the weight that is added to the E-mail is:  b + n, where 
"b" is the base weight of the test (10 in both examples above), and "b" is 
either 0 (in the first example) or the number of anti-filtering comments 
that are found.

There isn't an option for a multiplier (so that an E-mail with 20 comments 
would get a weight of 100 and an E-mail with 40 comments would get a weight 
of 200).  So you can't add 5 for every comment.
                                         -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to