> In a filter, you could use a line such as:
> 
>          HELO  0  ENDSWITH  .inalarm.com.mx
> 
> as well as:
> 
>          MAILFROM  0  IS  [EMAIL PROTECTED]


I haven't used any of the filters yet....
I assume that these entries go in the Global.cfg file?

Is there anyway to place all of them in an external file and apply the
same weight/rules to everything?
I have an ASP script that edits our FROMFILE file right now and would
rather not have it edit the global.cfg file directly?
Also, is there a limit to the number of filters?







> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]] On Behalf Of R. 
> Scott Perry
> Sent: Monday, September 30, 2002 9:17 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Fromfile blacklist question.
> 
> 
> 
> > > In this case, you would need to enter [EMAIL PROTECTED] or 
> > > @bellsouth.net.  Alternatively, you could use a filter 
> that filters 
> > > on the HELO/EHLO text, that filters for ".inalarm.com.mx".
> >
> >Could you have both filters read from the same 'fromfile'?
> 
> The "fromfile" test type just checks the return address, and nothing 
> else.  That -- and the "ipfile" test type (which checks the 
> IP address of 
> the sender) are pretty much obsolete now (since the filters 
> can accomplish 
> the same thing, with more flexibility).  So the best option 
> would be just 
> to create a filter instead, which would be able to filter 
> both the MAIL 
> FROM and the HELO.
> 
> >What's the syntax to setup the HELO/EHLO filter from an 
> external file?
> 
> In a filter, you could use a line such as:
> 
>          HELO  0  ENDSWITH  .inalarm.com.mx
> 
> as well as:
> 
>          MAILFROM  0  IS  [EMAIL PROTECTED]
> 
>                                         -Scott
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the 
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> ---
> [This E-mail scanned for 
> viruses by F-Proto Virus Scanner]
> 
> 

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to