Hi,
 
Behavior confirmed. 
 
Now, is this MY misunderstanding (then I've had it wrong all the time) or is
this a huge production-stopper bug:
 
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Filter CONTENT: Not skipping
E-mail due to current weight of 15.
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Filter: Set max weight to 9.
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Checking TESTSFAILED:
DSBLSINGLE SORBS SORBS-DUHL HELOBOGUS IPNOTINMX SPAMHEADERS SPFPASS SNIFFER
DYNAMIC-IP OPEN-RELAY .
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Triggered TESTSFAILED CONTAINS
filter CONTENT on SNIFFER [weight->7].
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Checking TESTSFAILED:
DSBLSINGLE SORBS SORBS-DUHL HELOBOGUS IPNOTINMX SPAMHEADERS SPFPASS SNIFFER
DYNAMIC-IP OPEN-RELAY CONTENT .

after 14 more identical lines, it reaches the END statement:
 
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Checking TESTSFAILED:
DSBLSINGLE SORBS SORBS-DUHL HELOBOGUS IPNOTINMX SPAMHEADERS SPFPASS SNIFFER
DYNAMIC-IP OPEN-RELAY CONTENT .
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Triggered TESTSFAILED CONTAINS
filter CONTENT on SBL [weight->0].
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Filter: END command conditions
met; ending this filter.

Now, I'm pretty certain that filter lines were ACCUMULATIVE, e.g. 7 + 0 = 7
-> It should have exited with the TOTAL weight of 7.
 
However, it does not. Instead of having "CONTENT:7" it ends the filter with
0 (which suppresses the display of the test in the summary line).
 
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd Checking TESTSFAILED:
DSBLSINGLE SORBS SORBS-DUHL HELOBOGUS IPNOTINMX SPAMHEADERS SPFPASS SNIFFER
DYNAMIC-IP OPEN-RELAY .
11/17/2006 09:54:36.486 qcd1d01a4000048c8.smd HELOBOGUS:3 SPAMHEADERS:3
nNOLEGITCONTENT:-2 SPFPASS:-2 DYNAMIC-IP:6 OPEN-RELAY:5 .  Total weight =
13.




Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206 

 

  _____  

From: Andy Schmidt [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 17, 2006 10:00 AM
To: 'declude.junkmail@declude.com'
Subject: Filter 'END' statement in 4.3.14 flushes WEIGHT?


Hi,
 
Can anyone confirm that the 'END' statement is functioning properly. I've
been noticing/suspecting that certain test combinations had much too little
weights and I finally have time to debug that.
 
This is the entry in the GLOBAL.CFG
 

CONTENT  filter  D:\IMail\Declude\CONTENTfilter.txt x 0 0


Means - the filter itself has a weight of 0 - all weights would be assigned
IN the filter
 
Here CONTENTfilter.txt:
 

SKIPIFWEIGHT 20
MAXWEIGHT 9
 
TESTSFAILED 7 CONTAINS SNIFFER
TESTSFAILED 1 CONTAINS SNIFFER-SCAMS
TESTSFAILED 1 CONTAINS SNIFFER-PORN
TESTSFAILED 2 CONTAINS SNIFFER-MALWARE
TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC
TESTSFAILED -2 CONTAINS SNIFFER-IP
 
TESTSFAILED 4 CONTAINS INV-URIBL-WT1
TESTSFAILED 5 CONTAINS INV-URIBL-WT2
TESTSFAILED 6 CONTAINS INV-URIBL-WT3
TESTSFAILED 7 CONTAINS INV-URIBL-WT4
 
TESTSFAILED END CONTAINS SPAMCOP
TESTSFAILED END CONTAINS NJABLSOURCES
TESTSFAILED END CONTAINS AHBLSOURCES
TESTSFAILED END CONTAINS AHBLPSSL
TESTSFAILED END CONTAINS SORBS-SPAM
TESTSFAILED END CONTAINS SENDERDB-BLOCK
TESTSFAILED END CONTAINS SBL
 
TESTSFAILED 2 CONTAINS SNIFFER-IP

As far as I can tell, the Filter works fine as long as there is only SNIFFER
and/or URIBL and will return the proper weights around 7 through 9.  
 
However, if it hits the END statement is appears as if it always returns
ZERO.  In other words, it loses the weight that had been accumulated up to
that point.
 
Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206 
 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to