MCP rule

[Daniel Fuhrer]

Hi all

 

I have a question about MCP rules. In general the rules are working.
Here my rules:

 

header          __BOUNCE_RULE1          Subject =~ /warning: could not
send message for past 4 hours/i

header          __BOUNCE_RULE2          Subject =~ /returned mail:/i

header          __BOUNCE_RULE3          Subject =~ /delivery status
notification/i

header          __BOUNCE_RULE4          Subject =~ /delivery
notification:/i

header          __BOUNCE_RULE5          Subject =~ /mail system error/i

header          __BOUNCE_RULE6          Subject =~ /undelivered mail/i

header          __BOUNCE_RULE7          Subject =~ /failure delivery/i

header          __BOUNCE_RULE8          Subject =~ /failure notice/i

header          __BOUNCE_RULE9          Subject =~ /mail delivery
problem/i

header          __BOUNCE_RULE10         Subject =~ /delivery failure/i

header          __BOUNCE_RULE11         Subject =~ /undeliverable mail/i

header          __BOUNCE_RULE12         Subject =~ /mail delivery
failed/i

header          __BOUNCE_RULE20         Content-Type =~
/delivery-status/i

header          __BOUNCE_RULE30         Auto-Submitted =~
/auto-generated/i

header          __BOUNCE_RULE40         From =~ /mail delivery
subsystem/i

header          __BOUNCE_RULE41         From =~ /postmaster/i

header          __BOUNCE_RULE42         From =~ /mailer-deamon/i

header          __BOUNCE_RULE50         To =~ /newsletter/i

 

meta            BOUNCE_RULE1            ((__BOUNCE_RULE1 ||
__BOUNCE_RULE2) && __BOUNCE_RULE20 && __BOUNCE_RULE30 && __BOUNCE_RULE40
&& __BOUNCE_RULE50)

describe        BOUNCE_RULE1            Indicates a bounce from the
mailgateway

score           BOUNCE_RULE1            12

 

meta            BOUNCE_RULE2            ((__BOUNCE_RULE3 ||
__BOUNCE_RULE4 || __BOUNCE_RULE5 || __BOUNCE_RULE6 || __BOUNCE_RULE7 ||
__BOUNCE_RULE8 || __BOUNCE__RULE9 || __BOUNCE_RULE10 || __BOUNCE_RULE11
|| __BOUNCE_RULE12) && (__BOUNCE_RULE40 || __BOUNCE_RULE41 ||
__BOUNCE_RULE42) && __BOUNCE_RULE50)

describe        BOUNCE_RULE2            Indicates a bounce from a remote
mailserver

score           BOUNCE_RULE2            12

 

header          T_BOUNCE_RULE1          Subject =~ /warning: could not
send message for past 4 hours/i

describe        T_BOUNCE_RULE1          BOUNCE_RULE Subject Warning:
could not send message for past 4 hours

header          T_BOUNCE_RULE2          Subject =~ /returned mail:/i

describe        T_BOUNCE_RULE2          BOUNCE_RULE Subject Returned
mail:

header          T_BOUNCE_RULE3          Subject =~ /delivery status
notification/i

describe        T_BOUNCE_RULE3          BOUNCE_RULE Subject Delivery
Status Notification

header          T_BOUNCE_RULE4          Subject =~ /delivery
notification:/i

describe        T_BOUNCE_RULE4          BOUNCE_RULE Subject Delivery
Notification

header          T_BOUNCE_RULE5          Subject =~ /mail system error/i

describe        T_BOUNCE_RULE5          BOUNCE_RULE Subject Mail System
Error

header          T_BOUNCE_RULE6          Subject =~ /undelivered mail/i

describe        T_BOUNCE_RULE6          BOUNCE_RULE Subject Undelivered
Mail

header          T_BOUNCE_RULE7          Subject =~ /failure delivery/i

describe        T_BOUNCE_RULE7          BOUNCE_RULE Subject Failure
Delivery

header          T_BOUNCE_RULE8          Subject =~ /failure notice/i

describe        T_BOUNCE_RULE8          BOUNCE_RULE Subject failure
notice

header          T_BOUNCE_RULE9          Subject =~ /mail delivery
problem/i

describe        T_BOUNCE_RULE9          BOUNCE_RULE Subject Mail
Delivery Problem

header          T_BOUNCE_RULE10         Subject =~ /delivery failure/i

describe        T_BOUNCE_RULE10         BOUNCE_RULE Subject Mail
DELIVERY FAILURE

header          T_BOUNCE_RULE11         Subject =~ /undeliverable mail/i

describe        T_BOUNCE_RULE11         BOUNCE_RULE Subject
Undeliverable Mail

header          T_BOUNCE_RULE12         Subject =~ /mail delivery
failed/i

describe        T_BOUNCE_RULE12         BOUNCE_RULE Subject Mail
delivery failed

header          T_BOUNCE_RULE20         Content-Type =~
/delivery-status/i

describe        T_BOUNCE_RULE20         BOUNCE_RULE Content-Type

header          T_BOUNCE_RULE30         Auto-Submitted =~
/auto-generated/i

describe        T_BOUNCE_RULE30         BOUNCE_RULE Auto-Submitted

header          T_BOUNCE_RULE40         From =~ /Mail Delivery
Subsystem/i 

describe        T_BOUNCE_RULE40         BOUNCE_RULE From

header          T_BOUNCE_RULE41         From =~ /postmaster/i

describe        T_BOUNCE_RULE41         BOUNCE_RULE From postmaster

header          T_BOUNCE_RULE42         From =~ /MAILER-DAEMON/i

describe        T_BOUNCE_RULE42         BOUNCE_RULE From MAILER-DAEMON

header          T_BOUNCE_RULE50         To =~ /newsletter/i

describe        T_BOUNCE_RULE50         BOUNCE_RULE To

 

 

 

The following mail is not marked as MCP Highscore and I don't understand
why. Here the MCP Report (from Mailwatch):

 

T_BOUNCE_RULE11    BOUNCE_RULE Subject Undeliverable Mail 

T_BOUNCE_RULE20    BOUNCE_RULE Content-Type 

T_BOUNCE_RULE42    BOUNCE_RULE From MAILER-DAEMON 

T_BOUNCE_RULE50    BOUNCE_RULE To

 

Thanks for your help.

 

Cheers Daniel

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20070709/6ca136e5/attachment.html