[Declude.JunkMail] Word Filter code?
Title: Message What is the meaning of (295)? I am almost sure it has to do with the filter that has failed! X-RBL-Warning: WORDFILTER: Message failed WORDFILTER test (295) How can we setup a code so we can make sure we know which listing is triggered? For example in this line, is there anyway to list a code after $: SUBJECT1CONTAINS$ Regards, Kami
Re: [Declude.JunkMail] Word Filter code?
What is the meaning of (295)? I am almost sure it has to do with the filter that has failed! X-RBL-Warning: WORDFILTER: Message failed WORDFILTER test (295) It is the line number in the filter where the test was triggered. How can we setup a code so we can make sure we know which listing is triggered? For example in this line, is there anyway to list a code after $: SUBJECT 1 CONTAINS $ You can either use the line number to find which filter triggered the test, or you can use LOGLEVEL HIGH, which will have a Triggered filter on $ [Weight-1] line in the log, that shows the filter that caused the test to be triggered ($ in this case), as well as the new weight (for people who aren't good at math G). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Word Filter code?
Hi again.. Line number? I bet it does not count blank lines right? Line 1: SUBJECT 1 CONTAINS$ Blank spacer Line 3: SUBJECT 3 CONTAINS$$$ The Line 3 is actually Line 2!? So who is on 3rd? :D Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, September 04, 2002 9:31 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Word Filter code? What is the meaning of (295)? I am almost sure it has to do with the filter that has failed! X-RBL-Warning: WORDFILTER: Message failed WORDFILTER test (295) It is the line number in the filter where the test was triggered. How can we setup a code so we can make sure we know which listing is triggered? For example in this line, is there anyway to list a code after $: SUBJECT 1 CONTAINS $ You can either use the line number to find which filter triggered the test, or you can use LOGLEVEL HIGH, which will have a Triggered filter on $ [Weight-1] line in the log, that shows the filter that caused the test to be triggered ($ in this case), as well as the new weight (for people who aren't good at math G). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Word Filter code?
Line number? I bet it does not count blank lines right? Line 1: SUBJECT 1 CONTAINS$ Blank spacer Line 3: SUBJECT 3 CONTAINS$$$ The Line 3 is actually Line 2!? So who is on 3rd? :D It *should* count blank lines, so it should match the line number used in text editors. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Word Filter.. multiple incidents?
Does the Word Filter add the weights based on the number of incidents of the word or if the word is hit it is only counted once. For example: SUBJECT 5 CONTAINS XYZ If the subject comes up with: XYZ = XYZ + Nothing does this count as 10 or 5? The matches only get counted once, so the above would have a weight of 5. I guess whatever the answer it should hold true for BODY and Header as well. That is correct. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Word filter
Hopefully a simple question. In the word filter will it pick up every word on the line of if it is set up as a phrase will it just do that. Do quotation marks make a difference? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around - every word? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around - phrase? Thanks, Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Word filter
Hopefully a simple question. In the word filter will it pick up every word on the line of if it is set up as a phrase will it just do that. Do quotation marks make a difference? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around - every word? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around - phrase? Declude won't look for quotes there, so the second line would only match if there were quotes in the spam. The first line will match an E-mail that contains Lowest Mortgage Rates Around (without the quotes that I added). It would not match The Highest Mortgage Rates Are Around The Lowest Yet (that has the same words in it but in a different order). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Word Filter?
Title: Message Hi; In the Word Filter we can use a line as such: REVDNS -5 CONTAINS yahoo.com The domain name listed here refers to Yahoo.com specifically or like the BlackList or WhiteListrefers to anything that ends with Yahoo.com? For example does the above also assigns a -5 to SpamYahoo.com? ThanksKami
Re: [Declude.JunkMail] Word Filter?
In the Word Filter we can use a line as such: REVDNS -5 CONTAINS yahoo.com The domain name listed here refers to Yahoo.com specifically or like the BlackList or WhiteList refers to anything that ends with Yahoo.com? The CONTAINS in this case will match any reverse DNS entry that contains yahoo.com in it (mail.yahoo.com, notyahoo.com, yahoo.com.spammer.com, etc.). For example does the above also assigns a -5 to SpamYahoo.com? Yes, it does. You could instead use: REVDNS -5 CONTAINS.yahoo.com since no Yahoo.com mailserver reverse DNS entry should be just yahoo.com. We may later add an ENDSWITH that could be used here, to prevent yahoo.com.spammer.com from matching (but on the other hand, if they did that, they could just as easily use mail.yahoo.com as the reverse DNS entry). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
