Print Page | Close Window

Order of filtering

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=2818
Printed Date: 22 February 2025 at 5:45pm


Topic: Order of filtering
Posted By: Guests
Subject: Order of filtering
Date Posted: 02 February 2004 at 10:10am

Why are messages that dont pass AuthorizedToEmail filter scanned for keywords and quarantined ???

version 212

I have all my domains listed in "Local domains". Is this the problem ? Can be "Local domains" and "Authorized To email" lists used at the same time ?

Thanks

(4944) Connection from: 193.109.181.247  -  Originating country : Czech Republic
02.02.04 16:00:46:828 -- (4944) Resolving 193.109.181.247 - proxy-grafikams.powernet.cz
02.02.04 16:00:46:828 -- (4944) - EmailTO is not in AuthorizedTOEmail list...
02.02.04 16:00:46:828 -- (4944) RCPT TO: mailto:claudia@mydomain.cz" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - claudia@mydomain.cz accepted
02.02.04 16:01:05:000 -- (4944) Found Keywords: [mail transaction failed. partial message is available.]
02.02.04 16:01:05:000 -- (4944) EMail from mailto:bill@anotherdomain.cz" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - bill@anotherdomain.cz to mailto:claudia@mydomain.cz" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - claudia@mydomain.cz matches content filter rules - rejected.
02.02.04 16:01:05:062 -- (4944) EMail from mailto:bill@anotherdomain.cz" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - bill@anotherdomain.cz to mailto:claudia@mydomain.cz" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - claudia@mydomain.cz was received and quarantined. Size: 30 KB
02.02.04 16:01:05:125 -- (4944) Disconnect


Replies:
Posted By: LogSat
Date Posted: 02 February 2004 at 11:47pm

That is ineed odd. If a recipeint in an email does not match the "Authorized To", the email is supposed to be rejected immediately, not quarantined.

Can you please let us know if by any chance 193.109.181.247 is one of the IPs on the SpamFilter server?

If not, if you can email us at mailto:support@logsat.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - support@logsat.com a copy of all your black/white list files, along with the SpamFilter.ini file, and the full from/to email addresses in question we'll try to replicate the problem.

Roberto F.
LogSat Software

 

Posted By: LogSat
Date Posted: 03 February 2004 at 2:25pm

We received your config files. Mistery solved.

You are missing all of the error reponses under Settings - Customized Items. Without them, not knowing what error to output to the client, SpamFilter will usually ignore the filters and accept the email.  To restore the original settings you can replace your blank entries with the following in the SpamFilter.ini file (after closing SpamFilter):

[Error Response]
ResponseBlacklistedMAPS=521 The IP %IP% is Blacklisted by %MAPSResponse%.
ResponseBlacklistLocalIP=521 The domain %Domain% is Blacklisted.
ResponseBlacklistLocalDomain=521 The domain %Domain% is Blacklisted.
ResponseNoReverseDNS=550 Your IP %IP% does not have a reverse DNS entry. Disconnecting...
ResponseMaxRCPTTO=550 You exceeded then maximum number of RCPT TO. Disconnecting...
ResponseCountryBlacklist=550 Your IP address is from a blacklisted country. Disconnecting..
ResponseRelayRestricted=550 You are not allowed to send mail to %EMailTo%
ResponseBlacklistLocalEMail=521 The EMail %EMailFrom% is Blacklisted.
ResponseKeywordMatch=557 This email is rejected. It contains keywords rejected by the antispam content filter.
ResponseBlacklistLocalEMailTo=521 The EMail %EMailTo% is Blacklisted.
ResponseMaxIncomingMsgSize=552 This email is rejected. It exceeds the maximum allowed message size.

Roberto F.
LogSat Software


Print Page | Close Window