RE: [Fwd: Re: filter question]

Beware complex body filters.  I have deleted the virus one I posted the other 
day because it was causing too much load on PO and
causing STMP-Accept processes to stack up.  Look at adding this to a 
Spamassassin filter instead. It's not spam but SA will do the
trick.

Dan

> -----Original Message-----
> From: Elton [mailto:ehd@xxxxxxxxxxx]
> Sent: Thursday, January 29, 2004 11:46 AM
> To: Alessio Gianni - OZ web dvd design
> Subject: Re: [Fwd: Re: filter question]
>
>
> > but if I change to TEXT it will filter all emails containing it in the
> > body
> > too, and I don't want...
>
> That's the "rub" with filtering -- you can get aggressive and watch for
> false positives or go less aggressive and live with more SPAM.
>
> You need to pick and choose your "body_filter text" carefully, because
> it will filter the entire body text.  Ditto with header_filters.
>
> If you want to filter and are stressed over false positives I recommend
> using RBL_filters and the "spam_assassin" plug-in -- this setup will do
> significant filtering with nil false positives.
>
>
> Elton
>
> P.S. - if you don't want the "blue pill" to filter when discussed on
> this board (or any specific domain to filter) -- you can exclude such
> in the Src.Addr section, ie:
>
> Src.Addr  *yourdomain.com        NOT AND
> Src.Addr  *tenon.com             NOT AND
> Src.Addr  *someotherdomain.com   NOT
>
>
> Body
> ----
> Text    *thisphrase|Thisphrase|THISPHRASE*    OR
> Text    *thatphrase|Thatphrase|THATPHRASE*
>
>
> On Jan 29, 2004, at 12:30 PM, Alessio Gianni - OZ web dvd design wrote:
>
> > gess what? my filter intercepted your rply since I wrote the name of
> > that
> > blue pills, Viag.a, he!
> >
> > but if I change to TEXT it will filter all emails containing it in the
> > body
> > too, and I don't want...
> >
> > or am I wrong?
> >
> >
> >
> >
> >> You appear to have the second and third line set to "File Name" --
> >> Change
> >> to "Text".
> >>
> >>
> >> Elton
> >>
> >> On Jan 29, 2004, at 12:04 PM, postoffice@xxxxxxxxxxxx wrote:
> >>
> >>>
> >>> ok, now my filter is working well with:
> >>>
> >>> Body: Text = **
> >>>
> >>> but it completely ignores the second line which is:
> >>>
> >>> Body: File Name = *.exe|.scr|.bin|.pp|.vba|.pif*
> >>> (Opcode is OR)
> >>>
> >>> and the third line which is:
> >>>
> >>> Body: File Name = *.scr*
> >>> (Opcode is OR)
> >>>
> >>>
> >>> so any message containing a .scr attachment goes straight to
> >>> destination, no
> >>> filtering at all, w h y ?
> >>>
> >>> please help
> >>>
> >>> PS: is there a DISCUSSION FORUM fro PO?
> >>
> >
>
> ---------
> Tenon Intersystems' Post.Office Mailing List
> To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
> with the body only containing:
> unsubscribe
> Find the searchable mailing list archives at:
> http://postoffice.computeroil.com/

---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/