Hi Roberto,

Congratulations about SpamFilter. Its a very nice program with many options.

I would like to suggest some more option in SpamFilter. They´re:

1) An option to limit the size of the e-mail(per domain if possible). Since SpamFilter is in front of my smtp servers I don´t wanna waste bandwidth with large attachments. A whitelist per e-mail address for this would be nice too.

2) That the id number of the e-mails transactions be the same and in sequence for each e-mail processed in the system. For example, take a look at the log:

05/28/03 19:10:37:167 -- (1576) Connection from: 200.210.86.130  -  Originating country : Brazil
05/28/03 19:10:45:919 -- (1576) Resolving 200.210.86.130 -
05/28/03 19:10:45:919 -- (1576) Mail from: mailto:cursos@interacao.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cursos@interacao.com.br
05/28/03 19:10:49:524 -- (1576) - MAPS search done... .
05/28/03 19:10:49:524 -- (1576) RCPT TO: mailto:geadm@execut.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - geadm@execut.com.br accepted
05/28/03 19:11:00:550 -- (1576) EMail from mailto:cursos@interacao.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cursos@interacao.com.br to mailto:geadm@execut.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - geadm@execut.com.br was queued. Size: 27 KB
05/28/03 19:11:00:560 -- (1584) Sending email from mailto:cursos@interacao.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cursos@interacao.com.br to mailto:geadm@execut.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - geadm@execut.com.br
05/28/03 19:11:00:741 -- (1584) EMail from mailto:cursos@interacao.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - cursos@interacao.com.br to mailto:geadm@execut.com.br" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - geadm@execut.com.br   was forwarded to 10.0.0.28
05/28/03 19:11:03:184 -- (1576) Disconnect

This transaction received the numbers (1576) and (1584). It will be more easier to search the logs if the id number is the same.

3) That the quarentined itens has a field with the reason why it was quarentined.

4) Some integration with Anti-Virus products like F-Prot (DOS) that its freeware, would be a GREATE option.

Thats all for this moment  :)

Thanks and keep the excellent support and work,

Abel.

Abel,

Thanks for the suggestions. Adding a limit based on msg size is a very good idea. We're calculating the msg size anyhow right now to add it in the log, so it will be fairly simple to add a reject based on that. We'll be implementing that shortly then.

We can't make the white-lists filter-specific, that would be too cumbersome both for us to program and for admins to manage, but pse keep in mind that there is a whitelist for email addresses right now for users who wish to have their email unfiltered.

The ID you refer to in the logs is actually the ID of the thread performing that particular task. Being fully multithtreaded, each incoming and outgoing connections are handled by different thread, and we output them in the logs to indicate which thread is doing what for troubleshooting. I doubt we can change that..!

The new build with the quarantine (a beta should be ready within 24/48 hours finally..) will have the reject reasons and details for it (which MAPS server, which keyword for example caused the reject).

Integration with anti-virus products in on its way as well! It will be a month or two before we have it ready though.

Roberto Franceschetti
LogSat Software

Of course we will...! Like most options, we always try to make them user-selectable.

Roberto Franceschetti
LogSat Software

On the multi thteading issue ... I guess you have never looked at Sendmail logs!  Sometimes you have to search over 2 - 3 screens before you find all the "chunks" of one mail proscess.  I can't even imagine HOW you could rearange the logging to kepp them together without really slowing down things.

das