Re: [Fwd: Re: filter question]

[Elton <ehd@xxxxxxxxxxx>]

> but if I change to TEXT it will filter all emails containing it in the body
> too, and I don't want...

That's the "rub" with filtering -- you can get aggressive and watch 
for false positives or go less aggressive and live with more SPAM.

You need to pick and choose your "body_filter text" carefully, 
because it will filter the entire body text.  Ditto with 
header_filters.

If you want to filter and are stressed over false positives I 
recommend using RBL_filters and the "spam_assassin" plug-in -- this 
setup will do significant filtering with nil false positives.


Elton

P.S. - if you don't want the "blue pill" to filter when discussed on 
this board (or any specific domain to filter) -- you can exclude such 
in the Src.Addr section, ie:

Src.Addr  *yourdomain.com        NOT AND
Src.Addr  *tenon.com             NOT AND
Src.Addr  *someotherdomain.com   NOT


Body
----
Text    *thisphrase|Thisphrase|THISPHRASE*    OR
Text    *thatphrase|Thatphrase|THATPHRASE*


On Jan 29, 2004, at 12:30 PM, Alessio Gianni - OZ web dvd design wrote:

> gess what? my filter intercepted your rply since I wrote the name of that
> blue pills, Viag.a, he!
>
> but if I change to TEXT it will filter all emails containing it in the body
> too, and I don't want...
>
> or am I wrong?
>
>
>
>
> > You appear to have the second and third line set to "File Name" --  Change
> > to "Text".
> >
> >
> > Elton
> >
> > On Jan 29, 2004, at 12:04 PM, postoffice@xxxxxxxxxxxx wrote:
> >
> > > ok, now my filter is working well with:
> > >
> > > Body: Text = **
> > >
> > > but it completely ignores the second line which is:
> > >
> > > Body: File Name = *.exe|.scr|.bin|.pp|.vba|.pif*
> > > (Opcode is OR)
> > >
> > > and the third line which is:
> > >
> > > Body: File Name = *.scr*
> > > (Opcode is OR)
> > >
> > >
> > > so any message containing a .scr attachment goes straight to
> > > destination, no
> > > filtering at all, w h y ?
> > >
> > > please help
> > >
> > > PS: is there a DISCUSSION FORUM fro PO?

---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/