Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - anyway to choose not quarantine within a filter?
  FAQ FAQ  Forum Search   Register Register  Login Login

anyway to choose not quarantine within a filter?

 Post Reply Post Reply
Author
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Topic: anyway to choose not quarantine within a filter?
    Posted: 15 November 2007 at 12:31pm
For example, I keep getting emails with keyword like "pen!s" and "big dic'k." So many to a point that that the quarantine has hundreds of spam and there's no easy way to find the legit ones.

I just want to completely drop them whenever I see them, not quarantine. Is there a way to setup the SFI so that once certain conditions are met, it just delete the emails.

If I put these in the keyword filter, those spam will still show up in quarantine because i cannot drop all keyword filtered emails.
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 15 November 2007 at 4:47pm
This is an easy one :-)

Please see the following section of the manual that talks about the keywords and the NULL modifier (and please note the **double** colon that must be used instead of the single colon):

Keywords Filter - You can check email content and subject header for specific keyword and/or phrases. If found, the email is rejected. You can also use Regular Expressions (RegEx). If the keyword file does not exist it will be created. The file is reloaded every minute. The contents of the file will be loaded in the memo box, allowing you to make changes to the file. This list supports the ::NULL option to send emails in a black hole. If an entry is in the form keyword::NULL it will cause all emails to be accepted and then sent to NULL right away. Such emails will not cause NDRs, they will not be quarantined, they will not be seen by the users. If an entry is in the form keyword::NoNDR such emails will not cause NDRs as in the DoNotSendNDROnQuarantine parameter in the ini file. This list supports the ::Honeypot option, which will cause the sender's IP address to be automatically blacklisted in the future.  Please note that unlike in other cases, with the keyword list you must enter the ":" symbol twice to specify the extra tag.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 16 November 2007 at 9:34am
Thank you for the response and it's a nice trick. here's another thing. Majority of my spam is caught under honeypot. I think honeypot filter takes proceeding than keyword which only capture 1%.

Should I stop quarantine honeypot attractions? I guess my goal is to reduce the amount of quarantine so that people can at least look at them.
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.109 seconds.