Print Page | Close Window

Excluded from emails still being filtered by keywords process

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=3427
Printed Date: 23 February 2025 at 1:20am


Topic: Excluded from emails still being filtered by keywords process
Posted By: Guests
Subject: Excluded from emails still being filtered by keywords process
Date Posted: 14 April 2004 at 12:08pm

2.0.1.322

I have a wildcard entry in the Excluded From list of "*.yahoogroups.com".

The keyword filter is still picking these up occasionally and throwing them in the quarantine.

Ideas?

Roy


Replies:
Posted By: Desperado
Date Posted: 14 April 2004 at 5:47pm

Roy,

Which list?  The Excluded Domains OR Excluded From Email? In my Excluded Frm Email list I have the following 2 entries and do not see any blocked messages in my logs:

mailto:*@returns.groups.yahoo.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@returns.groups.yahoo.com
mailto:*@yahoogroups.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@yahoogroups.com

Regards,

Dan S.

Posted By: Guests
Date Posted: 14 April 2004 at 11:24pm

Dan,

Exactly what I have in my Excluded From list... still puts them in quarantine if a keyword triggers.

How do I reach you... I was trying to email you about getting a regex list... but your email bounced...??

 

Thanks,

Roy

Posted By: LogSat
Date Posted: 15 April 2004 at 12:09am

Roy,

If you can email us please all your local black/whitelist files, your keyword file, your SpamFilter.ini file, and a copy of the activity log for the day the email was quarantined we'll try to understand what is happening. We'll need to know the from and to email addresses involved, and the build of SpamFilter you're using.

Roberto F.
LogSat Software

Posted By: Desperado
Date Posted: 15 April 2004 at 10:09am

Roy,

Try daseligmann at hotmail dot com and then I will figure out why you got blocked.

Dan

Posted By: Guests
Date Posted: 15 April 2004 at 10:50pm

Roberto

I have a similar problem with 1.2.*

I have a list of ex-employee in the blacklist TO but many email reach past the filter. I also have the Do not quarantine ticked.

These email addreses do not exist anymore inside our Exchange so the "unknown recipient" collection box gets them.

This happened with all previous versions and also happened while we had quarantine in place (now we just tag'n'deliver).

What happens if an incoming email has multiple recipients, some of with are in the TO blacklist, some are legit?

Thanks

Cristian Croitoru

Posted By: LogSat
Date Posted: 19 April 2004 at 12:45am

Cristian,

The user who posted the orignal question (Roy) had whitelisted an IP address, thus it was bypassing all his filters, including the To Blacklist.

If you don't have a similar case, to find out what is happening we'll need to see the full headers of the emails making it thru, along with the sections of the SpamFilter's logfile that show all the entries for that connection. Please note that the blacklist TO filter work based on the RCPT TO command, and not the "To:" header.

An explanation of the above, and of what happens with emails with multiple recipients can be found at http://www.logsat.com/spamfilter/forums/showmessage.asp?messageID=3289" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.logsat.com/spamfilter/forums/showmessage.asp?messageID=3289" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.logsat.com/spamfilter/forums/showmessage.asp?messageID=3289

Roberto F.
LogSat Software


Print Page | Close Window