csj([EMAIL PROTECTED]) is reported to have said:
> Before I file a bug report, I'd like to confirm the behavior I
> describe below.
> 
> I have in my my ~/.mailfilterrc a DENY rule for "^Subject:.*Test"
> and ALLOW rules for "marssociety" and "marssocietynewsletter":
> 
> $ grep -Ei 'test|marssociety' ~/.mailfilterrc
> DENY=^Subject:.*Test
> ALLOW=^To:.*marssocietynewsletter
> ALLOW=^Reply-To:.*marssociety
> ALLOW=^Subject:.*marssociety
> 
> I found out this morning that an email with the word "Contest" in
> the Subject was deleted by mailfilter (according to my log).  The
> email also had "[marssocietynewsletter]" in the Subject and I
> suspect, given the format of previous communications, also
> "marssociety" in the Reply-To.  The email therefore should have
> passed two of my ALLOW rules.
I found to prevent the above I added an allow like this
ALLOW=^(To|Cc):[EMAIL PROTECTED]

Then if a msg came in from debian-user with the word "Test" in the 
Subject the message would -not- be deleted.

On the other hand, if a certain member of that list annoyed you and
you did
DENY=^From:[EMAIL PROTECTED]
his mail wouldn't be deleted because of the above ALLOW.
Also, if you use SCORE, the above allow will -not- delete the message
if it exceeds HIGHSCORE and comes from debian-user.

On the otherhand if you do SCORE +100 = ^Subject:.*Test -and- do -not-
have the above ALLOW, Test will be deleted (if HIGHSCORE = 100) even
if it comes from debian-user.  You will also delete mails that have
Subjects like this as well
Testing is not working
debian testing has good software
plese help me test this program
first testament

so you will have to use extended regex to fine tune your rules.

[OT]

I found a spam killer header last night.  Run this on -your- mailfilter
logs.

egrep ^X-pstn-levels: mailfilterlog

Every mail that has that header, was spam.  I checked 4 days of logs
and all day today withou one good mail having that header. 

SCORE +10o = ^X-pstn-levels:

Is catching mail that my other (extensive) rules were missing.

For more info on this see
http://www.trendmicro.com/ftp/documentation/guides/sps_gsg_v1.pdf
Page 17-10

:-) HTH, YMMV, HAND :-)
Wayne

-- 
Scheduled Release Date: A carefully calculated date determined by
estimating the actual shipping date and subtracting six months from it.
_______________________________________________________


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to