csj([EMAIL PROTECTED]) is reported to have said: > Before I file a bug report, I'd like to confirm the behavior I > describe below. > > I have in my my ~/.mailfilterrc a DENY rule for "^Subject:.*Test" > and ALLOW rules for "marssociety" and "marssocietynewsletter": > > $ grep -Ei 'test|marssociety' ~/.mailfilterrc > DENY=^Subject:.*Test > ALLOW=^To:.*marssocietynewsletter > ALLOW=^Reply-To:.*marssociety > ALLOW=^Subject:.*marssociety > > I found out this morning that an email with the word "Contest" in > the Subject was deleted by mailfilter (according to my log). The > email also had "[marssocietynewsletter]" in the Subject and I > suspect, given the format of previous communications, also > "marssociety" in the Reply-To. The email therefore should have > passed two of my ALLOW rules. I found to prevent the above I added an allow like this ALLOW=^(To|Cc):[EMAIL PROTECTED]
Then if a msg came in from debian-user with the word "Test" in the Subject the message would -not- be deleted. On the other hand, if a certain member of that list annoyed you and you did DENY=^From:[EMAIL PROTECTED] his mail wouldn't be deleted because of the above ALLOW. Also, if you use SCORE, the above allow will -not- delete the message if it exceeds HIGHSCORE and comes from debian-user. On the otherhand if you do SCORE +100 = ^Subject:.*Test -and- do -not- have the above ALLOW, Test will be deleted (if HIGHSCORE = 100) even if it comes from debian-user. You will also delete mails that have Subjects like this as well Testing is not working debian testing has good software plese help me test this program first testament so you will have to use extended regex to fine tune your rules. [OT] I found a spam killer header last night. Run this on -your- mailfilter logs. egrep ^X-pstn-levels: mailfilterlog Every mail that has that header, was spam. I checked 4 days of logs and all day today withou one good mail having that header. SCORE +10o = ^X-pstn-levels: Is catching mail that my other (extensive) rules were missing. For more info on this see http://www.trendmicro.com/ftp/documentation/guides/sps_gsg_v1.pdf Page 17-10 :-) HTH, YMMV, HAND :-) Wayne -- Scheduled Release Date: A carefully calculated date determined by estimating the actual shipping date and subtracting six months from it. _______________________________________________________ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]