Kim, Also, one thing that can affect the filter files that I have seen in the past is spammers will put fake html tags in the middle of the URI to get it past filters
Example: americ<faketag>aspharm.com - the email client will normally interpret this correctly and display americaspharm.com (i.e. not rendering the fake tag). If you still have the original d*.smd file this may shed some light... Darrell ------------------------------------------- DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Try it today - http://www.invariantsystems.com ----- Original Message ----- From: "Kim Premuda" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, May 11, 2005 5:34 PM Subject: Re: [Declude.JunkMail] Custom Filter Diagnosis Help > >Couple of gotha's we usually see > >[1] Make sure there are no hidden or extra spaces after the name. > >[2} If it is the last item in the filter do an extra "return" so that your > >line is not the last line in the filter. > > > >Darrell > Hi, Darrel. > > Thanks for responding! > > There is no space character after 'americaspharma.com', and it is not the last item in the filter (there are over 100 lines after this one). > > Also, I should have mentioned that we are using JM 1.82. > > Another point of interest... > > When I sent my original message to the list, it was trapped by JM on the filter line containing 'americaspharma.com'. > > Kim > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
