OK why then the
07/09/2004 00:15:58 Q462a09e900349a60 Triggered CONTAINS filter SAVFILTER on
X-Bulk: 99 [weight->0; X-Bulk: 99
here are the contents of the sav-smtp.txt that did not work, why?
HEADERS END CONTAINS X-Bulk: 99
HEADERS END CONTAINS X-Bulk: 98
HEADERS END CONTAINS X-Bulk: 97
HEADERS END CONTAINS X-Bulk: 96
HEADERS END CONTAINS X-Bulk: 95
HEADERS END CONTAINS X-Bulk: 94
HEADERS END CONTAINS X-Bulk: 93
HEADERS END CONTAINS X-Bulk: 92
HEADERS END CONTAINS X-Bulk: 91
and here are my modified lines that do work, I changed this last night and
route to now works
HEADERS 0 CONTAINS X-Bulk: 99
HEADERS 0 CONTAINS X-Bulk: 98
HEADERS 0 CONTAINS X-Bulk: 97
HEADERS 0 CONTAINS X-Bulk: 96
HEADERS 0 CONTAINS X-Bulk: 95
HEADERS 0 CONTAINS X-Bulk: 94
HEADERS 0 CONTAINS X-Bulk: 93
HEADERS 0 CONTAINS X-Bulk: 92
HEADERS 0 CONTAINS X-Bulk: 91
Log from a message that has the message failed line
07/09/2004 02:23:13 Q6400122200f49c21 Triggered CONTAINS filter SAVFILTER on
X-Bulk: 99 [weight->0; X-Bulk: 99
07/09/2004 02:23:14 Q6400122200f49c21 DSBL:6 CBL:8 ROUTING:4
CIP-LeadingTextMatch:5 . Total weight = 23.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed DSBL
("http://dsbl.org/listing?ip=218.255.207.94";). Action=IGNORE.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed CBL ("Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=218.255.207.94";). Action=IGNORE.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed ROUTING (This E-mail was
routed in a poor manner consistent with spam [2000010f].). Action=IGNORE.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed CIP-LeadingTextMatch
(Message failed CIP-LeadingTextMatch: 13.). Action=IGNORE.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed SPAM-MED (Total weight
between 14 and 24.). Action=IGNORE.
07/09/2004 02:23:14 Q6400122200f49c21 R1 Message OK
07/09/2004 02:23:14 Q6400122200f49c21 Subject: noticeable
07/09/2004 02:23:14 Q6400122200f49c21 From: [EMAIL PROTECTED]
To: IP: 218.255.207.94 ID: M2004070902153414397 07/09/2004 02:23:14
Q6400122200f49c21 Tests failed [weight=23]: DSBL=IGNORE CBL=IGNORE
IPNOTINMX=IGNORE ROUTING=IGNORE SAVFILTER=IGNORE CIP-LeadingTextMatch=IGNORE
SPAM-MED=IGNORE
07/09/2004 02:23:14 Q6400122200f49c21 Using [incoming] CFG file
D:\IMAIL\Declude\$default$.junkmail.
07/09/2004 02:23:14 Q6400122200f49c21 Redirecting
[EMAIL PROTECTED] to file
D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed DSBL
("http://dsbl.org/listing?ip=218.255.207.94";). Action=WARN.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed CBL ("Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=218.255.207.94";). Action=WARN.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed ROUTING (This E-mail was
routed in a poor manner consistent with spam [2000010f].). Action=WARN.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed SAVFILTER (Message failed
SAVFILTER test (line 1, weight 0)). Action=ROUTETO.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed CIP-LeadingTextMatch
(Message failed CIP-LeadingTextMatch: 13.). Action=WARN.
07/09/2004 02:23:14 Q6400122200f49c21 Msg failed SPAM-MED (Total weight
between 14 and 24.). Action=HOLD.
07/09/2004 02:23:14 Q6400122200f49c21 Subject: noticeable
07/09/2004 02:23:14 Q6400122200f49c21 From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED] IP: 218.255.207.94 ID:
M2004070902153414397 07/09/2004 02:23:14 Q6400122200f49c21 Tests failed
[weight=23]: DSBL=WARN CBL=WARN IPNOTINMX=IGNORE ROUTING=WARN
SAVFILTER=ROUTETO CIP-LeadingTextMatch=WARN SPAM-MED=HOLD
07/09/2004 02:23:14 Q6400122200f49c21 Last action = HOLD.
So I guess my new question would be why can a message trigger a test but not
fail a test using END and how do I use end where the test is triggered and
fails?
Kevin Bilbee
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
> Sent: Friday, July 09, 2004 4:11 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Test Action Failure
>
>
>
> >Why did this not ROUTETO
> ...
> >The test trigered the Contains for the SAVFILTER but SAVFILTER
> does not show
> >up in the Tests Failed Section
>
> Well, there is a very clear answer to your question -- Declude
> JunkMail did
> not use the ROUTETO action for the SAVFILTER test because the E-mail did
> not fail the SAVFILTER test.
>
> I'm guessing, though, that you will want the answer to the next
> question --
> "Why didn't this E-mail fail the SAVFILTER test?". The key to answering
> that would be the contents of the sav-smtp.txt file, which I
> believe have a
> line in there that is preventing the test from failing in this case.
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers
> since 2000.
> Declude Virus: Ultra reliable virus detection and the leader in
> mailserver
> vulnerability detection.
> Find out what you've been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
