Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Order of filtering
  FAQ FAQ  Forum Search   Register Register  Login Login

Order of filtering

 Post Reply Post Reply
Author
HBr View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote HBr Quote  Post ReplyReply Direct Link To This Post Topic: Order of filtering
    Posted: 02 February 2004 at 10:10am

Why are messages that dont pass AuthorizedToEmail filter scanned for keywords and quarantined ???

version 212

I have all my domains listed in "Local domains". Is this the problem ? Can be "Local domains" and "Authorized To email" lists used at the same time ?

Thanks

(4944) Connection from: 193.109.181.247  -  Originating country : Czech Republic
02.02.04 16:00:46:828 -- (4944) Resolving 193.109.181.247 - proxy-grafikams.powernet.cz
02.02.04 16:00:46:828 -- (4944) - EmailTO is not in AuthorizedTOEmail list...
02.02.04 16:00:46:828 -- (4944) RCPT TO: claudia@mydomain.cz accepted
02.02.04 16:01:05:000 -- (4944) Found Keywords: [mail transaction failed. partial message is available.]
02.02.04 16:01:05:000 -- (4944) EMail from bill@anotherdomain.cz to claudia@mydomain.cz matches content filter rules - rejected.
02.02.04 16:01:05:062 -- (4944) EMail from bill@anotherdomain.cz to claudia@mydomain.cz was received and quarantined. Size: 30 KB
02.02.04 16:01:05:125 -- (4944) Disconnect

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 02 February 2004 at 11:47pm

That is ineed odd. If a recipeint in an email does not match the "Authorized To", the email is supposed to be rejected immediately, not quarantined.

Can you please let us know if by any chance 193.109.181.247 is one of the IPs on the SpamFilter server?

If not, if you can email us at support@logsat.com a copy of all your black/white list files, along with the SpamFilter.ini file, and the full from/to email addresses in question we'll try to replicate the problem.

Roberto F.
LogSat Software

 

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 03 February 2004 at 2:25pm

We received your config files. Mistery solved.

You are missing all of the error reponses under Settings - Customized Items. Without them, not knowing what error to output to the client, SpamFilter will usually ignore the filters and accept the email.  To restore the original settings you can replace your blank entries with the following in the SpamFilter.ini file (after closing SpamFilter):

[Error Response]
ResponseBlacklistedMAPS=521 The IP %IP% is Blacklisted by %MAPSResponse%.
ResponseBlacklistLocalIP=521 The domain %Domain% is Blacklisted.
ResponseBlacklistLocalDomain=521 The domain %Domain% is Blacklisted.
ResponseNoReverseDNS=550 Your IP %IP% does not have a reverse DNS entry. Disconnecting...
ResponseMaxRCPTTO=550 You exceeded then maximum number of RCPT TO. Disconnecting...
ResponseCountryBlacklist=550 Your IP address is from a blacklisted country. Disconnecting..
ResponseRelayRestricted=550 You are not allowed to send mail to %EMailTo%
ResponseBlacklistLocalEMail=521 The EMail %EMailFrom% is Blacklisted.
ResponseKeywordMatch=557 This email is rejected. It contains keywords rejected by the antispam content filter.
ResponseBlacklistLocalEMailTo=521 The EMail %EMailTo% is Blacklisted.
ResponseMaxIncomingMsgSize=552 This email is rejected. It exceeds the maximum allowed message size.

Roberto F.
LogSat Software

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.219 seconds.