Print Page | Close Window

anyway to choose not quarantine within a filter?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6299
Printed Date: 17 December 2017 at 8:47am


Topic: anyway to choose not quarantine within a filter?
Posted By: Stupid
Subject: anyway to choose not quarantine within a filter?
Date Posted: 15 November 2007 at 12:31pm
For example, I keep getting emails with keyword like "pen!s" and "big dic'k." So many to a point that that the quarantine has hundreds of spam and there's no easy way to find the legit ones.

I just want to completely drop them whenever I see them, not quarantine. Is there a way to setup the SFI so that once certain conditions are met, it just delete the emails.

If I put these in the keyword filter, those spam will still show up in quarantine because i cannot drop all keyword filtered emails.



Replies:
Posted By: LogSat
Date Posted: 15 November 2007 at 4:47pm
This is an easy one :-)

Please see the following section of the manual that talks about the keywords and the NULL modifier (and please note the **double** colon that must be used instead of the single colon):

Keywords Filter - You can check email content and subject header for specific keyword and/or phrases. If found, the email is rejected. You can also use Regular Expressions (RegEx). If the keyword file does not exist it will be created. The file is reloaded every minute. The contents of the file will be loaded in the memo box, allowing you to make changes to the file. This list supports the ::NULL option to send emails in a black hole. If an entry is in the form keyword::NULL it will cause all emails to be accepted and then sent to NULL right away. Such emails will not cause NDRs, they will not be quarantined, they will not be seen by the users. If an entry is in the form keyword::NoNDR such emails will not cause NDRs as in the DoNotSendNDROnQuarantine parameter in the ini file. This list supports the ::Honeypot option, which will cause the sender's IP address to be automatically blacklisted in the future.  Please note that unlike in other cases, with the keyword list you must enter the ":" symbol twice to specify the extra tag.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: Stupid
Date Posted: 16 November 2007 at 9:34am
Thank you for the response and it's a nice trick. here's another thing. Majority of my spam is caught under honeypot. I think honeypot filter takes proceeding than keyword which only capture 1%.

Should I stop quarantine honeypot attractions? I guess my goal is to reduce the amount of quarantine so that people can at least look at them.



Print Page | Close Window