Print Page | Close Window

Filter Order - how filters are applied

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6726
Printed Date: 21 December 2024 at 9:39am


Topic: Filter Order - how filters are applied
Posted By: LogSat
Subject: Filter Order - how filters are applied
Date Posted: 31 July 2009 at 10:01am

As of SpamFilter ISP version 4.0.0.766, following is the updated order of the filters. In red are the blacklists, in green the whitelists:

  1. Cached IP blacklist
  2. Greylist
  3.         Whitelisted IP
  4.         Whitelisted Email Address To
  5.         Whitelisted EMail Address From
  6.         Whitelisted Email From Domain
  7.         Whitelisted Auto White List Force Delivery
    1.         Exceeded MaxMsgSizeForSpamFiltering
            Keyword Whitelist
  9. Allowed Domains
  10. Local IP Blacklist
  11. Local Domain Blacklist
  12. Local Emails Blacklist
  13. Local Emails TO Blacklist
  14. Not in Authorized TO Emails
  15. Country Blacklist
  16. Reject No Reverse DNS
  17. Reject Empty Mail From
  18. Reject Same To From Email address
  19. Reject if Recipient's email in Honeypot email list
  20. Reject if IP in Honeypot-generated auto-ban list
  21. Reject Same To From Domain
  22. Recipient Count > Max RCPTTO
  23. MX Record check
  24. SFDB Filter
  25. SPF Filter
  26. MAPS check
  27. SFDC Filter
  28. Blank emails with attachments only
  29. Spam Images in PDFs
  30. Attachment Filter
  31. Keywords
  32. Image Filtering
  33. Bayesian Filtering
  34. SURBL check
  35. Resolve URLs and check IPs in MAPS
  36. Antivirus Plugin

Please note the availability of the following option in the SpamFilter.ini file to handle exceptions with the first two blacklists that take priority over the whitelists:

;Add any IPs (separated by commas - no wildcards) that you do not wish to be automatically added to the Honeypot IP blacklist. This setting also prevents those IPs to be added to the IP cache blacklist, and to allow them to bypass the greylist filter

DoNotAddIPToHoneypot=

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Replies:
Posted By: LogSat
Date Posted: 19 November 2009 at 4:52pm

As of SpamFilter ISP version 4.1.2.819, following is the updated order of the filters. In red are the blacklists, in green the whitelists:

  1. Cached IP blacklist
  2. Greylist
  3.         Whitelisted IP
  4.         Whitelisted Email Address To
  5.         Whitelisted EMail Address From
  6.         Whitelisted Email From Domain
  7.         Whitelisted Auto White List Force Delivery
    1.         Exceeded MaxMsgSizeForSpamFiltering
            Keyword Whitelist
  9. Allowed Domains
    1. Not in Authorized TO Emails
    Local IP Blacklist
  11. Local Domain Blacklist
  12. Local Emails Blacklist
  13. Local Emails TO Blacklist
  14. Country Blacklist
  15. Reject No Reverse DNS
  16. Reject Empty Mail From
  17. Reject Same To From Email address
  18. Reject if Recipient's email in Honeypot email list
  19. Reject if IP in Honeypot-generated auto-ban list
  20. Reject Same To From Domain
  21. Recipient Count > Max RCPTTO
  22. MX Record check
  23. SFDB Filter
  24. SPF Filter
  25. MAPS check
  26. SFDC Filter
  27. Blank emails with attachments only
  28. Spam Images in PDFs
  29. Attachment Filter
  30. Keywords
  31. Image Filtering
  32. Bayesian Filtering
  33. SURBL check
  34. Resolve URLs and check IPs in MAPS

  1. Note - The Antivirus Plugin, if present, will stop any infected emails regardless of the whitelist settings

Please note the availability of the following option in the SpamFilter.ini file to handle exceptions with the first two blacklists that take priority over the whitelists:

;Add any IPs (separated by commas - no wildcards) that you do not wish to be automatically added to the Honeypot IP blacklist. This setting also prevents those IPs to be added to the IP cache blacklist, and to allow them to bypass the greylist filter

DoNotAddIPToHoneypot=

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window