Spam over the max allowed score still slips through!!!

[Julian Field]

At 14:12 14/05/2004, you wrote:
>OK, that makes sense, sort of.
>
>Do you mean I should reverse the actions order then or does it mean that a
>combination of delete and forward is never possible??

A combination delete and forward is meaningless. What would you want delete
and forward to do with the message?


>Would :
>striphtml forward root at mydomain.com delete
>do what I want??
>
>
>I use the forward option to check for false positives.
>
>The strange thing is that i use the same rule with blacklisted e-mail
>addresses within our organization (like sales@ and info@) and for those
>addressess the delete forward rule works fine, those mails are never
>delivered.
>
>
>On Fri, 14 May 2004, Julian Field wrote:
>
> > At 13:26 14/05/2004, you wrote:
> > >Hmmm I have just received a legitimate e-mail (non spam) that has a score
> > >of > 10.
> > >
> > >I am getting a little further every time. I now know that only part(!) of
> > >the high spam score actions are being done, and that the mail is not being
> > >treated as low spam by MailScanner
> > >
> > >My rule for high scoring spam:
> > >striphtml delete forward root at mydomain.com
> > >
> > >striphtml and the forward are being done (I do not do a forward for low
> > >scoring spam) only the delete action is not done.
> >
> > But if you delete it how are you going to forward it? Because you are
> > forwarding it, the delete operation is ignored. Doesn't make sense
> otherwise.
> > --
> > Julian Field
> > www.MailScanner.info
> > MailScanner thanks transtec Computers for their support
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> > -------------------------- MailScanner list ----------------------
> > To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > Before posting, please see the Most Asked Questions at
> > http://www.mailscanner.biz/maq/     and the archives at
> > http://www.jiscmail.ac.uk/lists/mailscanner.html
> >
>
>-------------------------- MailScanner list ----------------------
>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
>http://www.mailscanner.biz/maq/     and the archives at
>http://www.jiscmail.ac.uk/lists/mailscanner.html

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html