Spam over the max allowed score still slips through!!!

[Julian Field]

At 14:37 14/05/2004, you wrote:
>On Fri, 14 May 2004, Julian Field wrote:
>
> > At 14:12 14/05/2004, you wrote:
> > >OK, that makes sense, sort of.
> > >
> > >Do you mean I should reverse the actions order then or does it mean that a
> > >combination of delete and forward is never possible??
> >
> > A combination delete and forward is meaningless. What would you want delete
> > and forward to do with the message?
>
>I would like it to re-route the message.  It would never arrive at the
>original intended recipient

That is already true as you don't specify "deliver".

>  but forwarded to a general (spam) archive for
>manual review instead.
>
>It works for most e-mails, just not for some.
>
> >
> >
> > >Would :
> > >striphtml forward root at mydomain.com delete
> > >do what I want??
> > >
> > >
> > >I use the forward option to check for false positives.
> > >
> > >The strange thing is that i use the same rule with blacklisted e-mail
> > >addresses within our organization (like sales@ and info@) and for those
> > >addressess the delete forward rule works fine, those mails are never
> > >delivered.
> > >
> > >
> > >On Fri, 14 May 2004, Julian Field wrote:
> > >
> > > > At 13:26 14/05/2004, you wrote:
> > > > >Hmmm I have just received a legitimate e-mail (non spam) that has
> a score
> > > > >of > 10.
> > > > >
> > > > >I am getting a little further every time. I now know that only
> part(!) of
> > > > >the high spam score actions are being done, and that the mail is
> not being
> > > > >treated as low spam by MailScanner
> > > > >
> > > > >My rule for high scoring spam:
> > > > >striphtml delete forward root at mydomain.com
> > > > >
> > > > >striphtml and the forward are being done (I do not do a forward
> for low
> > > > >scoring spam) only the delete action is not done.
> > > >
> > > > But if you delete it how are you going to forward it? Because you are
> > > > forwarding it, the delete operation is ignored. Doesn't make sense
> > > otherwise.
> > > > --
> > > > Julian Field
> > > > www.MailScanner.info
> > > > MailScanner thanks transtec Computers for their support
> > > >
> > > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> > > >
> > > > -------------------------- MailScanner list ----------------------
> > > > To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > > > Before posting, please see the Most Asked Questions at
> > > > http://www.mailscanner.biz/maq/     and the archives at
> > > > http://www.jiscmail.ac.uk/lists/mailscanner.html
> > > >
> > >
> > >-------------------------- MailScanner list ----------------------
> > >To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > >Before posting, please see the Most Asked Questions at
> > >http://www.mailscanner.biz/maq/     and the archives at
> > >http://www.jiscmail.ac.uk/lists/mailscanner.html
> >
> > --
> > Julian Field
> > www.MailScanner.info
> > MailScanner thanks transtec Computers for their support
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >
> > -------------------------- MailScanner list ----------------------
> > To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> > Before posting, please see the Most Asked Questions at
> > http://www.mailscanner.biz/maq/     and the archives at
> > http://www.jiscmail.ac.uk/lists/mailscanner.html
> >
>
>-------------------------- MailScanner list ----------------------
>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
>http://www.mailscanner.biz/maq/     and the archives at
>http://www.jiscmail.ac.uk/lists/mailscanner.html

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html