Re: [Fwd: Re: filter question]

[Elton <ehd@xxxxxxxxxxx>]

There is a issue (or bug, that I contend arose after r7.11) that if 
you use more than 30-60 body_filter phrases (depending on your cpu 
and ram), you may have stacking and/or excessive sending delays when 
large attachments are passing through the server.

If you keep it under 30 and you avoid spaces between phrases; 
body_filters should not cause problems.  Granted, 30 phrases is not 
many when you have to handle case, as required with body_filters.


Elton

On Jan 29, 2004, at 1:01 PM, Dan Tappin wrote:

> Beware complex body filters.  I have deleted the virus one I posted 
> the other day because it was causing too much load on PO and causing 
> STMP-Accept processes to stack up.  Look at adding this to a 
> Spamassassin filter instead. It's not spam but SA will do the trick.
>
> Dan
>
> > -----Original Message-----
> > From: Elton [mailto:ehd@xxxxxxxxxxx]
> > Sent: Thursday, January 29, 2004 11:46 AM
> > To: Alessio Gianni - OZ web dvd design
> > Subject: Re: [Fwd: Re: filter question]
> >
> >
> > > but if I change to TEXT it will filter all emails containing it in the
> > > body
> > > too, and I don't want...
> >
> > That's the "rub" with filtering -- you can get aggressive and watch for
> > false positives or go less aggressive and live with more SPAM.
> >
> > You need to pick and choose your "body_filter text" carefully, because
> > it will filter the entire body text.  Ditto with header_filters.
> >
> > If you want to filter and are stressed over false positives I recommend
> > using RBL_filters and the "spam_assassin" plug-in -- this setup will do
> > significant filtering with nil false positives.
> >
> >
> > Elton
> >
> > P.S. - if you don't want the "blue pill" to filter when discussed on
> > this board (or any specific domain to filter) -- you can exclude such
> > in the Src.Addr section, ie:
> >
> > Src.Addr  *yourdomain.com        NOT AND
> > Src.Addr  *tenon.com             NOT AND
> > Src.Addr  *someotherdomain.com   NOT
> >
> >
> > Body
> > ----
> > Text    *thisphrase|Thisphrase|THISPHRASE*    OR
> > Text    *thatphrase|Thatphrase|THATPHRASE*
> >
> >
> > On Jan 29, 2004, at 12:30 PM, Alessio Gianni - OZ web dvd design wrote:
> >
> > > gess what? my filter intercepted your rply since I wrote the name of
> > > that
> > > blue pills, Viag.a, he!
> > >
> > > but if I change to TEXT it will filter all emails containing it in the
> > > body
> > > too, and I don't want...
> > >
> > > or am I wrong?
> > >
> > >
> > >
> > >
> > > > You appear to have the second and third line set to "File Name" --
> > > > Change
> > > > to "Text".
> > > >
> > > >
> > > > Elton
> > > >
> > > > On Jan 29, 2004, at 12:04 PM, postoffice@xxxxxxxxxxxx wrote:
> > > >
> > > > > ok, now my filter is working well with:
> > > > >
> > > > > Body: Text = **
> > > > >
> > > > > but it completely ignores the second line which is:
> > > > >
> > > > > Body: File Name = *.exe|.scr|.bin|.pp|.vba|.pif*
> > > > > (Opcode is OR)
> > > > >
> > > > > and the third line which is:
> > > > >
> > > > > Body: File Name = *.scr*
> > > > > (Opcode is OR)
> > > > >
> > > > >
> > > > > so any message containing a .scr attachment goes straight to
> > > > > destination, no
> > > > > filtering at all, w h y ?
> > > > >
> > > > > please help
> > > > >
> > > > > PS: is there a DISCUSSION FORUM fro PO?
> >
> > ---------
> > Tenon Intersystems' Post.Office Mailing List
> > To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
> > with the body only containing:
> > unsubscribe
> > Find the searchable mailing list archives at:
> > http://postoffice.computeroil.com/
>
> ---------
> Tenon Intersystems' Post.Office Mailing List
> To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
> with the body only containing:
> unsubscribe
> Find the searchable mailing list archives at:
> http://postoffice.computeroil.com/

---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/