Spam over the max allowed score still slips through!!!

Remco Barendse mailscanner at BARENDSE.TO
Fri May 14 14:37:28 IST 2004


On Fri, 14 May 2004, Julian Field wrote:

> At 14:12 14/05/2004, you wrote:
> >OK, that makes sense, sort of.
> >
> >Do you mean I should reverse the actions order then or does it mean that a
> >combination of delete and forward is never possible??
>
> A combination delete and forward is meaningless. What would you want delete
> and forward to do with the message?

I would like it to re-route the message.  It would never arrive at the
original intended recipient but forwarded to a general (spam) archive for
manual review instead.

It works for most e-mails, just not for some.

>
>
> >Would :
> >striphtml forward root at mydomain.com delete
> >do what I want??
> >
> >
> >I use the forward option to check for false positives.
> >
> >The strange thing is that i use the same rule with blacklisted e-mail
> >addresses within our organization (like sales@ and info@) and for those
> >addressess the delete forward rule works fine, those mails are never
> >delivered.
> >
> >
> >On Fri, 14 May 2004, Julian Field wrote:
> >
> > > At 13:26 14/05/2004, you wrote:
> > > >Hmmm I have just received a legitimate e-mail (non spam) that has a score
> > > >of > 10.
> > > >
> > > >I am getting a little further every time. I now know that only part(!) of
> > > >the high spam score actions are being done, and that the mail is not being
> > > >treated as low spam by MailScanner
> > > >
> > > >My rule for high scoring spam:
> > > >striphtml delete forward root at mydomain.com
> > > >
> > > >striphtml and the forward are being done (I do not do a forward for low
> > > >scoring spam) only the delete action is not done.
> > >
> > > But if you delete it how are you going to forward it? Because you are
> > > forwarding it, the delete operation is ignored. Doesn't make sense
> > otherwise.
> > > --
> > > Julian Field
> > > www.MailScanner.info
> > > MailScanner thanks transtec Computers for their support
> > >
> > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> > >
> > > -------------------------- MailScanner list ----------------------
> > > To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > > Before posting, please see the Most Asked Questions at
> > > http://www.mailscanner.biz/maq/     and the archives at
> > > http://www.jiscmail.ac.uk/lists/mailscanner.html
> > >
> >
> >-------------------------- MailScanner list ----------------------
> >To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> >Before posting, please see the Most Asked Questions at
> >http://www.mailscanner.biz/maq/     and the archives at
> >http://www.jiscmail.ac.uk/lists/mailscanner.html
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list