<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">It actually doesn't matter where the "default" rule is placed, but it makes more logical sense to put it at the end, unless you're auto-generating the rulesets.<DIV><BR class="khtml-block-placeholder"></DIV><DIV>For all other rules, the order *does* matter, it's only the default rule that can be put anywhere.</DIV><DIV><BR><DIV><DIV>On 23 Mar 2006, at 13:53, Steve Campbell wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"> <DIV><FONT face="Arial" size="2">Yes, that's right. Just add the sender to the blacklist file.</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">The last line should be the default line in both files. I've seen different opinions on where it can be placed, but I always thought the lists were a "first find" type search-and-match, so the default makes sense at the end. </FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">Steve Campbell<BR><A href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A><BR>Charleston Newspapers<BR></FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <BLOCKQUOTE style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV> <DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B> <A title="linux_spartacus@yahoo.com" href="mailto:linux_spartacus@yahoo.com">spart cus</A> </DIV> <DIV style="FONT: 10pt arial"><B>To:</B> <A title="mailscanner@lists.mailscanner.info" href="mailto:mailscanner@lists.mailscanner.info">MailScanner discussion</A> </DIV> <DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, March 22, 2006 6:53 PM</DIV> <DIV style="FONT: 10pt arial"><B>Subject:</B> Re: Problem on whitelist/blacklist rules</DIV> <DIV><BR></DIV><BR><BR><B><I>Steve Campbell <<A href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A>></I></B> wrote: <BLOCKQUOTE class="replbq" style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid"> <DIV><FONT face="Arial" size="2">No, you're overlooking the blacklist part. The whitelist "no" parm you used for "test" indicates that it is not whitelisted and must go through the normal steps of any other email. You need to add test to the blacklist to make it definitely spam.</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">You should use your example in a circumstance where you might whitelist an entire domain, but want only the "test" address "not" to be whitelisted. For example:</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">In whiteli! st file</FONT></DIV> <DIV><FONT face="Arial" size="2">FromOrTo: <A href="mailto:test@domain.com">test@domain.com</A> no</FONT></DIV> <DIV><FONT face="Arial" size="2">FromOrTo: <A href="mailto:*@domain.com">*@domain.com</A> yes</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">In blacklist file</FONT></DIV> <DIV><FONT face="Arial" size="2">FromOrTo: <A href="mailto:test@domain.com">test@domain.com</A> yes</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">This would exclude the "test" address from whitelisting but whitelist everyone else in that domain . The blacklist would make "test" definitely spam. The "no" in the white/black list is used mostly for exclusions, the "yes" is for inclusion, for the white or black list file it is inside of.</FONT></DIV> <DIV><FONT face="!" size="2" ?arial?=""></FONT> </DIV> <DIV><FONT face="Arial" size="2">By removing both entries above from the whitelist and keeping the blacklist rule, you would be changing the strategy only for the <A href="mailto:*@domain.com">*@domain.com</A> , as now everyone but "test" would be required to pass your rules before it is delivered. As stands above, everyone but "test" automatically passes.</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">Clear? or more confusing?</FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV><FONT face="Arial" size="2">Steve Campbell<BR><A href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A><BR>Charleston Newspapers<BR></FONT></DIV> <DIV><FONT face="Arial" size="2"></FONT> </DIV> <DIV></DIV><BR></BLOCKQUOTE>Hi Steve,<BR>Got some part of it. Since im getting some spam mails, i just want to block certain sender. If thats the case then i would just add it on the blacklil! st file. Is this correct ?<BR><BR> <DIV><FONT face="Arial" size="2">In blacklist file</FONT></DIV> <DIV><FONT face="Arial" size="2">FromOrTo: <A href="mailto:test@domain.com">test@domain.com</A> yes # blacklist this sender<BR></FONT></DIV>FromOrTo: default no >>> ? Do i have to put these on the last line of my blacklist.rules ???<BR><BR>tia<BR><BR><BR><DIV> <BR class="khtml-block-placeholder"></DIV><HR size="1"> New Yahoo! Messenger with Voice. <A href="http://us.rd.yahoo.com/mail_us/taglines/postman5/*http://us.rd.yahoo.com/evt=39666/*http://beta.messenger.yahoo.com ">Call regular phones from your PC</A> and save big. <DIV> <BR class="khtml-block-placeholder"></DIV><HR><DIV><BR class="khtml-block-placeholder"></DIV>-- <BR>MailScanner mailing list<BR><A href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR>http://lists.mailscanner.info/mailman/listinfo/mailscanner<BR><BR>Before posting, read http://wiki.mailscanner.info/posting<BR><BR>Support MailScanner development - buy the book off the website! <BR></BLOCKQUOTE><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--<SPAN class="Apple-converted-space"> </SPAN></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">MailScanner mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Support MailScanner development - buy the book off the website!<SPAN class="Apple-converted-space"> </SPAN></DIV> </BLOCKQUOTE></DIV><BR><DIV> <DIV>-- </DIV><DIV>Julian Field</DIV><DIV>www.MailScanner.info</DIV><DIV>Buy the MailScanner book at <A href="http://www.MailScanner.info/store">www.MailScanner.info/store</A></DIV><DIV>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654</DIV> </DIV><BR></DIV></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</HTML>