I would wager that is a filter he has that lists the common dial-up revdns
patterns. Example:
REVDNS 3 ENDSWITH .client.comcast.net
REVDNS 2 STARTSWITH adsl-
REVDNS 2 STARTSWITH pool-
REVDNS 2 STARTSWITH cdm-
REVDNS 3 STARTSWITH dialup-
REVDNS 3 STARTSWITH cpe-
REVDNS 3 CONTAINS .dialup.
The hypens is just how he names the test. Only he can clairfy that 100%.
Darrell
-------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
----- Original Message -----
From: "Travis Sullivan" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Sunday, October 23, 2005 12:12 PM
Subject: Re: [Declude.JunkMail] found something new to me
I want to use combo filtering with testsfailed to further punish emails
that fail two or more of the reliable tests.
If I could get started with the correct format, I can build it from there.
In scotts example:
TESTSFAILED 32 CONTAINS REVDNS-DUL-KEYWORDS
what is the purpse of the hyphens seperating the test names?
Travis
----- Original Message -----
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Sunday, October 23, 2005 9:00 AM
Subject: Re: [Declude.JunkMail] found something new to me
Travis,
The one thing to keep in mind is that "TESTSFAILED" is a variable that
lists the tests that failed. The order of the TESTSFAILED line as you
know is dependent on which tests failed. Essentially for a one line in
the filter to try and list two tests names would be difficult to hit on.
The example that Scott sent is the best approach since it uses "CONTAINS"
and one test per line in the filter.
The point that Matt was trying to get across was that if you tried to
list them on the same line it is very difficult cause you have to take
specific ordering into account whereas Scott's example with one test
per-line is the easiest way to do it.
I think the best thing until you get the hang of this would be to post
what you want to do and what you have up to this point and we can guide
you home on if it will work and if it does not how to tweak it to work.
Darrell
-------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
----- Original Message -----
From: "Travis Sullivan" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Sunday, October 23, 2005 12:12 AM
Subject: Re: [Declude.JunkMail] found something new to me
Thanks for the reply Nick.
No, not at all. I thought I did.
global.cfg contents:
COMBO filter C:\IMail\Declude\lists\combo.txt x 0 0
combo.txt file contents:
TESTSFAILED 10 CONTAINS testname1-testname2
================
So, any test I want to combo script simply take the testname and
seperate them by a hyphen?
like:
SPAMCOP-SBL
I thought that is how it was setup, then scott emailed this example:
MAXWEIGHT 100
TESTSFAILED 60 CONTAINS NJABL-DUL
TESTSFAILED 75 CONTAINS NJABL-DYNABLOCK
TESTSFAILED 60 CONTAINS SORBS-DUHL
Now Matt says this:
TESTSFAILED 0 CONTAINS SPAMCOP SBL XBL
(no hypens)
And he said they have to be in the correct order for a matching string.
I guess I have to look in the logs for the correct order. Anyone have a
whitepaper on this?
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
