[Declude.JunkMail] Passing weight to Externalplus test

Matt Wed, 07 Apr 2004 14:03:59 -0700

I'm still having one problem with the script to detect message sizes. The %WEIGHT% is supposed to be passed into the script so that it can decide whether or not to fully run or immediately quit, but I can't get it to quit. Although this isn't critical for this one script, it is definitely the main component of the Sniffer bypassed that I would like to also put together.

Here's a copy of the call's from Declude as well as the current working version of the VB code. If anyone has any ideas about what I am missing, please chime in. Once this issue is resolved, I'll make a few adjustments and share it with the list fully documented. Also, please chime in about the CScript arguments if you have a better understanding of this. In yesterday's recommendations there were from zero to four arguments recommended, and for now, I have left off the //B and //S, but my experience here is lacking. Note that despite the simplicity of the arrangement, this is a very useful test, not just for adding or subtracting points, but for defeating many filters with extensive BODY searches. Over the last 3 days for instance, I have found that every message held that was over 100 KB was a false positive, though it is possible that some spams that were above my drop weight were this size and not monitored. I have also found that there were no held zombie spams with a size above 30 KB, which is the equivalent of the SIZE-M test shown below.

Thanks,

Matt

----- Global.cfg ----- SIZE-XXS external 11 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" 3 0 SIZE-XS external 12 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" 2 0 SIZE-S external 13 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" 0 0 SIZE-M external 14 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" 0 0 SIZE-L external 15 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" -2 0 SIZE-XL external 16 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" -3 0 SIZE-XXL external 17 "cscript C:\IMail\Declude\Size.vbs //NoLogo //T:2 %WEIGHT%" -5 0


----- Size.vbs -----
Dim objFSO, objFile

If WScript.arguments(0) > 27 Then
   WScript.Quit(0)
Else
   Set objFSO = CreateObject("Scripting.FileSystemObject")
   Set objFile = objFSO.GetFile(WScript.arguments(1))

   If objFile.size < 512 Then
       WScript.Quit(11) 'SIZE-XXS [0 KB - 0.5 KB]
   ElseIF objFile.size < 1024 Then
       WScript.Quit(12) 'SIZE-XS [0.5 KB - 1 KB]
   ElseIF objFile.size < 30720 Then
       WScript.Quit(13) 'SIZE-S [1 KB - 30 KB]
   ElseIF objFile.size < 102400 Then
       WScript.Quit(14) 'SIZE-M [30 KB - 100 KB]
   ElseIF objFile.size < 307200 Then
       WScript.Quit(15) 'SIZE-L [100 KB - 300 KB]
   ElseIF objFile.size < 1024000 Then
       WScript.Quit(16) 'SIZE-XL [300 KB - 1,000 KB]
   Else
       WScript.Quit(17) 'SIZE-XXL [+1,000 KB]
   End If

   Set objFile = nothing
   Set objFSO = nothing
End If


--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Passing weight to Externalplus test

Reply via email to