Sorry for the repeated posts but I think my question might have been lost in
another thread.
I'm working on a BYPASS Filter to identify ham. But I'm running into a
problem.
It seems that if STOPALLTESTS is used in place of the weight like:
BODY STOPALLTESTS CONTAINS content-type:
application/vnd.ms-
That it isn't logged in %TESTSFAILED%
Furthermore tests AFTER the BYPASS test (where STOPALLTESTS is hit) continue
to run.
In the below header, CATCHALLMAILS runs first then BYPASS then a number of
declude (IPNOTINMX, NOLEGIT, Sniffer - MS-WHITE, then filters) but as you
can see they're being logged.
The odd thing is that if I replace STOPALLTESTS in my BYPASS filter with 0
then the test is logged.
Any ideas?
-0-
X-Note:
X-Note: ==================================================================
X-Note: Spam Score: 0 [SUBJECT STRING ON 120-340 & DELETED ON 350+]
X-Note: Scan Time: 19:20:55 on 27 Oct 2004
X-Note: Spool File: D2d4fc3a90020bf39.SMD
X-Note: Server Name: ns2.xxx.com
X-Note: SMTP Sender: [EMAIL PROTECTED]
X-Note: Reverse DNS & IP: ns2.xxx.com [xxx.xxx.89.132]
X-Note: Organization: ctcmx01.ap.org
X-Note: Recipient(s): [EMAIL PROTECTED]
X-Note: Country Chain: UNITED STATES->destination
X-Note: Tests Failed: CATCHALLMAILS, IPNOTINMX, NOLEGITCONTENT, MS-WHITE
X-Note: In or Out: outgoing
X-Note: ==================================================================
X-Note: filter [1.81] for SPAM & virus.
X-Note: ==================================================================
X-Note:
10/27/2004 07:21:01 PM
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0003_01C4BC5A.0E7F9FA0"
------=_NextPart_000_0003_01C4BC5A.0E7F9FA0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0004_01C4BC5A.0E7F9FA0"
------=_NextPart_001_0004_01C4BC5A.0E7F9FA0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset="iso-8859-1"
------=_NextPart_001_0004_01C4BC5A.0E7F9FA0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset="iso-8859-1"
------=_NextPart_001_0004_01C4BC5A.0E7F9FA0--
------=_NextPart_000_0003_01C4BC5A.0E7F9FA0
Content-Type: application/vnd.ms-excel;
name="AP_Select5_SA_9785638.xls"
Content-Disposition: attachment;
filename="AP_Select5_SA_9785638.xls"
Content-Transfer-Encoding: base64
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
