Sorry for the confusion that this might have caused.
Matt
Matthew Bramble wrote:
Scott,
I have a feeling that one of the recent changes created a bug in the way that scores are added in combination from the Global.cfg and the custom filter file when combined. Here's an example:
X-MailPure: ==================================================================
X-MailPure: IPNOTINMX: Failed, IP is not listed in MX or A records (weight 0).
X-MailPure: NOLEGITCONTENT: Failed, no legitimate content detected (weight 0).
X-MailPure: HELOBOGUS: Failed, bogus connecting server name (weight 4).
X-MailPure: DYNAMIC: Message failed DYNAMIC test (line 342, weight -3).
X-MailPure: ==================================================================
X-MailPure: Spam Score: 1
X-MailPure: Scan Time: 13:19:42 on 12/22/2003
X-MailPure: Spool File: D35b701a9017c3a95.SMD
X-MailPure: SMTP Sender: [EMAIL PROTECTED]
X-MailPure: Received From: 66-109-42-67.ip.reallyfastnet.com [66.109.42.67]
The DYNAMIC filter is scored as 3 points for a hit in Global.cfg
DYNAMIC filter C:\IMail\Declude\Filters\Dynamic.txt x 3 0
And within the filter file, it should have hit the following lines:
REVDNS -3 ENDSWITH .reallyfastnet.com REVDNS 0 CONTAINS -42- REVDNS 0 CONTAINS -109-
The total score should have been 0 points, but it scored a -3 instead. The order of the individual lines in the filter are as they appear above. Naturally this is a serious issue as it affects all counterbalanced filters and I need to change my settings pretty quick otherwise I'm going to be letting a bunch of spam through.
Thanks,
Matt
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
