Print Page | Close Window

Subject keyword search not working

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1739
Printed Date: 14 March 2025 at 6:40am


Topic: Subject keyword search not working
Posted By: Guests
Subject: Subject keyword search not working
Date Posted: 20 August 2003 at 12:28pm

I'm trying to filter messages with keywords for the subject using version 1.2.0.198. For example....

To block Re: Approved I have in the keyword list as Re:,Approved --it still gets through...

Also, I want to block Re: Wicked Screensaver with wicked,screensaver -- still gets through.

What's wrong? It's like it's not checking the subject line for keywords...




Replies:
Posted By: LogSat
Date Posted: 21 August 2003 at 12:50am

Paul,

SpamFilter was not scanning for keywords emails over a certain size. We've just uploaded a new build (1.2.0.199) that only computes the size for the plain text/html contents. This should resolve issues in filtering the emails with the sobig virus attachments.

Even though testing is not fully completed on this build, we've release it in a hurry to help dealing with this virus issue.

Roberto Franceschetti
LogSat Software



Posted By: Guests
Date Posted: 21 August 2003 at 5:42am

You might take a look at the build again - it still lets the sorbig worm through. It's certainly better, but not 100%

Regards, Allan



Posted By: Guests
Date Posted: 21 August 2003 at 9:45am

Is the keyword search case sensitive?

Re: Details is being block by using re:,details but other ones like Re: Your Application are not being blocked with keywords your,application



Posted By: Guests
Date Posted: 21 August 2003 at 10:03am
Another one not being blocked is Re: Re: My details which should be getting blocked using My,details or My details correct?


Posted By: Guests
Date Posted: 21 August 2003 at 10:10am

Looking at the quarantine DB, I see that some of the e-mails with the keywords mentioned in my previous post are being blocked. So it's like the scanner is getting overloaded and dropping some that it can't process? Just a guess...



Posted By: dcook
Date Posted: 21 August 2003 at 11:51am

I added the following keyword to try to block sobig.f --- would these keywords be correct?  I would appreciate feedback for anyone -- especially if you have had success.

Thank you!,.pif
Your details,.pif
Re: Details,.pif
Re: Re: My details,.pif
Re: Approved,.pif
Re: Your application,.pif
Re: Wicked screensaver,.pif
Re: That movie,.pif

Thanks!

Dwight 



Posted By: LogSat
Date Posted: 21 August 2003 at 11:39pm

Paul,

Can you please let us know which build you're using? Keyword scanning with the previous build .198 was skipped by default for messages over 64Kb in size.

On another note, keyword searches are not case sensitive (but RegEx searches are).

Roberto F.
LogSat Software




Print Page | Close Window