Spam Filter ISP Support - Keyword filter superceeds Excluded Domains and Excluded FROM?

Print Page | Close Window

Keyword filter superceeds Excluded Domains and Excluded FROM?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=610
Printed Date: 05 February 2025 at 12:59pm

Topic: Keyword filter superceeds Excluded Domains and Excluded FROM?

Posted By: Guests
Subject: Keyword filter superceeds Excluded Domains and Excluded FROM?
Date Posted: 20 May 2003 at 2:36pm

I have a sender who is on the Excluded From list and their domain is on the Excluded Domain list, yet they get filtered due to a keyword?

See excerpt from log. (domain names changed)

05/20/03 11:07:28:562 -- (212) Connection from: 170.135.240.61 - Originating country : United States
05/20/03 11:07:29:187 -- (212) Resolving 170.135.240.61 - mail1.usbank.com
05/20/03 11:07:29:187 -- (212) Bypassed all rules for: mailto:Beeson@domain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - Beeson@domain.com from mailto:SMerriman@48501.x.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SMerriman@48501.x.com
05/20/03 11:07:29:703 -- (212) Found Keywords: [find out more]
05/20/03 11:07:29:703 -- (212) EMail from mailto:SMerriman@48501.x.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SMerriman@48501.x.com to mailto:Beeson@domain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - Beeson@domain.com matches content filter rules - rejected.
05/20/03 11:07:29:843 -- (212) EMail from mailto:SMerriman@48501.x.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - SMerriman@48501.x.com to mailto:Beeson@domain.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - Beeson@domain.com was received and quarantined. Size: 7 KB

Replies:

Posted By: Guests
Date Posted: 20 May 2003 at 6:03pm

Same problem here with v 1.1.2.117

Posted By: LogSat
Date Posted: 20 May 2003 at 7:25pm

We were able to duplicate this only for the "Excluded FROM Emails", the "Excluded Domains" seems to be working fine.

We will be releasing a new build within a few days, and this fix will be included.

Roberto Franceschetti
LogSat Software

Posted By: LogSat
Date Posted: 20 May 2003 at 7:25pm

We were able to duplicate this only for the "Excluded FROM Emails", the "Excluded Domains" seems to be working fine.

We will be releasing a new build within a few days, and this fix will be included.

Roberto Franceschetti
LogSat Software

Posted By: Guests
Date Posted: 21 May 2003 at 2:14pm

Installed build 1.1.2.122 and this issue still appears to be the case

05/21/03 11:00:23:828 -- (127) Connection from: 206.191.138.90 - Originating country : United States
05/21/03 11:00:24:375 -- (127) Resolving 206.191.138.90 - mail.hdtd.com
05/21/03 11:00:24:375 -- (127) Bypassed all rules for: mailto:Renate@x.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - Renate@x.com from mailto:tcarroll@y.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - tcarroll@y.com
05/21/03 11:00:24:859 -- (127) Found Keywords: [quote,payment]
05/21/03 11:00:24:859 -- (127) EMail from mailto:tcarroll@y.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - tcarroll@y.com to mailto:Renate@connerhomes.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - Renate@connerhomes.com matches content filter rules - rejected.
05/21/03 11:00:25:031 -- (127) EMail from mailto:tcarroll@y.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - tcarroll@y.com to mailto:Renate@connerhomes.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - Renate@x.com was received and quarantined. Size: 9 KB
05/21/03 11:00:25:125 -- (127) Disconnect

Posted By: LogSat
Date Posted: 21 May 2003 at 9:39pm

Alan,

Registered build .122 was the latest one available when we confirmed that we were able to replicate the problem. Yesterday we made public build .122 available as well, it was not a new build... Sorry.

The new build with the fix will be out in a few days as soon as testing is complete with the new database-enabled quarantine.

Roberto F.
LogSat Software

Posted By: Guests
Date Posted: 28 May 2003 at 7:21pm

Hopefully soon, as this flaw compromises the whole idea of a "whitelist" if whitelisted recipients are still getting filtered.

Posted By: LogSat
Date Posted: 28 May 2003 at 9:43pm

Alan,

We released registered build 1.1.2.124 yesterday that fixes this problem (and 2 more):

// New to VersionNumber = '1.1.2.124';
{TODO -cFix : Whitelisted emails blocked if keyword match}
{TODO -cFix : The FQDN was not written in the welcome banner}
{TODO -cFix : Emails forwarded to default smtp rather than secondary fwding assigned to individual domains if multiple recipients}

Roberto Franceschetti
LogSat Software

Print Page | Close Window