Filters are run last. ----- Original Message ----- From: "Mark E. Smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 08, 2004 11:26 AM Subject: [Declude.JunkMail] Does STOPALLTESTS really stop all tests?
> I've got a whitelist filter file where I use the action "STOPALLTESTS": > > MAILFROM STOPALLTESTS CONTAINS @netrends.com > > This rule is defined as the first rule in my global.cfg (above all of the > IP4r, Catchall, externals, etc.) > If it trips the WHITELIST filter, why do the other tests (see declog below) > register? > > -0- > > 12/08/2004 12:00:35 Q3330261c009c1d52 Filter: Set min weight to -1000. > 12/08/2004 12:00:35 Q3330261c009c1d52 Triggered MAILFROM CONTAINS filter > WHITELISTFILTER on @netrends.com [weight->0; @netrends.com]. > 12/08/2004 12:00:35 Q3330261c009c1d52 nIPNOTINMX:-30 nNOLEGITCONTENT:-50 . > Total weight = -80. > 12/08/2004 12:00:35 Q3330261c009c1d52 Using [outgoing] CFG file global.cfg. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed CATCHALLMAILS (). > Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed SIZE-XS (Message failed > SIZE-XS: 12.). Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed MS-WHITE (Message failed > MS-WHITE: 0.). Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 Msg failed WEIGHTLEGIT (Total weight > between -5000 and 119.). Action=WARN. > 12/08/2004 12:00:35 Q3330261c009c1d52 R1 Message OK > 12/08/2004 12:00:35 Q3330261c009c1d52 Subject: testing > 12/08/2004 12:00:35 Q3330261c009c1d52 From: [EMAIL PROTECTED] To: > [EMAIL PROTECTED] IP: 65.196.89.161 ID: > 12/08/2004 12:00:35 Q3330261c009c1d52 Tests failed [weight=-80]: > CATCHALLMAILS=WARN SIZE-XS=WARN MS-WHITE=WARN WEIGHTLEGIT=WARN > 12/08/2004 12:00:35 Q3330261c009c1d52 Last action = IGNORE. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
