Spam Filter ISP Forums : :tagsubject not filtering properly https://www.logsat.com/spamfilter/forums/ Wed, 20 May 2026 13:02:56 +0000 Fri, 30 Nov 2007 14:35:30 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6303 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[:tagsubject not filtering properly : Sara, I actually do not use...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11233&title=tagsubject-not-filtering-properly#11233 Author: Desperado
Subject: 6303
Posted: 30 November 2007 at 2:35pm

Sara,
 
I actually do not use the bayesian filter as I have a large bas of customers and one groups "spam" is another groups business so the filter was too agressive for some groups.  On the "purge" issue, if you remove the ":null" it will tag / quarantine rather than nuking it.
]]> Fri, 30 Nov 2007 14:35:30 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11233&title=tagsubject-not-filtering-properly#11233 <![CDATA[:tagsubject not filtering properly : Ok a bit more info.....as of late...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11232&title=tagsubject-not-filtering-properly#11232 Author: scharette
Subject: 6303
Posted: 30 November 2007 at 2:06pm

Ok a bit more info.....as of late last night it doesn't look like it is doing it anymore...and I haven't changed anything...and now the email is getting properly delivered to the :tagspam To address with no gaps.....is it possible it was the bayesian filter causing this?  I kinda liked whatever was causing it...just because it was only happening with emails that were no question spam....just really needing to understand why it was happening so I could insure that it was not affecting valid emails....

At this point I guess it is nothing to worry about.   Just would be nice to understand why it occurred...

Thanks

Sara
]]> Fri, 30 Nov 2007 14:06:43 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11232&title=tagsubject-not-filtering-properly#11232 <![CDATA[:tagsubject not filtering properly : Hi Desperado I appreciate...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11230&title=tagsubject-not-filtering-properly#11230 Author: scharette
Subject: 6303
Posted: 30 November 2007 at 12:43am

Hi Desperado

I appreciate your response...however correct me if I am wrong that will pretty much just purge the data that contains those characters right?

Ok..to tell you truth I just some customers that I have setup to :tagsubject and deliver and they have been setup that way for a few months now (prior versions of the spam software were used when they originally set up this way).  They are use to seeing a lot of spam be delivered to them and now all of sudden they are not getting as much so they perceive that there must be a problem.  A bit ridiculous but true...and they just get a bit paranoid they are not getting all their mail.

I have no issues if the spam software is appending this I just want to understand that this is on purpose and what criteria has to be met to cause this....so I can explain to the customer why they are not getting as much spam. 

As far as I can tell I am going through the database while I was using 3.5.4.704 and I am not finding any emails with the | before them. 

So at this point I really just need help understanding why this happens...not that anything needs to be adjusted..

I am currently using the most recent 'unofficial' release 3.5.4.730.....

Thanks

Sara


Edited by scharette - 30 November 2007 at 1:21am]]> Fri, 30 Nov 2007 00:43:52 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11230&title=tagsubject-not-filtering-properly#11230 <![CDATA[:tagsubject not filtering properly : Sara, In your bloched to li...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11227&title=tagsubject-not-filtering-properly#11227 Author: Desperado
Subject: 6303
Posted: 29 November 2007 at 11:21pm

Sara,
 
In your bloched to list:
 
((?i).*[\|].*@.*):null
 
This got rid of mine.
]]> Thu, 29 Nov 2007 23:21:53 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11227&title=tagsubject-not-filtering-properly#11227 <![CDATA[:tagsubject not filtering properly : Hi,This worked great ...and fixed...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11226&title=tagsubject-not-filtering-properly#11226 Author: scharette
Subject: 6303
Posted: 29 November 2007 at 6:43pm

Hi,

This worked great ...and fixed the issue.  I see lots of spam getting passed through and marked properly as spam for keywords as well as all other filters.

I do have another issue and I am not sure if it is best posted here or not...sorry if I should of started another post please advise and I will make sure to do so in the future.

I am starting to see -- haven't noticed it before the 3.5.4.704 version...and I am not sure it is the spam filter...I just know I haven't seen it in prior versions that I have used (please keep in mind I did use an old release for awhile)...

I am starting to see emails with a | before the actual TO email but still part of the To email address -- example - |test@test.com.  Now the emails it is doing this for would be valid emails if the | was present.  All the emails that are coming in with the | are 100% no question spams.  I just want to check with you and see if the spam software would be appending this for any reason?  The reasons that they are quarantined range...so it is not just one filter that does this. Also these emails are always to multiple To addresses not just one and all addresses have this | in front of the address.

Again, at this time I am not sure it is the spam software just throwing me off a bit because I haven't seen it before and I couldn't imagine that spammers are dumb enough to put | on the To address if indeed it would be a valid email without it.  Don't get me wrong I know spammers aren't the brightest....so maybe that is the case...again just wanted to check with you and insure.

I am seeing on some accounts that they are getting a reduced amount of spam in them  .....or gaps where normally (before I upgraded to 3.5.4.704) they would get a spam every 3-5 minutes now they are not getting them for several hours -- those gaps where they are not getting anything I see multiple items in the quarantine database for them but the to address has the | before it....

I dont mind sending you an example of the header I just don't want to post the email accounts here as they would be valid if the | wasn't there....just let me know your thoughts here.

Thanks

Sara
Sling Shot



Edited by scharette - 29 November 2007 at 6:43pm]]> Thu, 29 Nov 2007 18:43:28 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11226&title=tagsubject-not-filtering-properly#11226 <![CDATA[:tagsubject not filtering properly : Sara,We&#039;ve actually just...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11208&title=tagsubject-not-filtering-properly#11208 Author: LogSat
Subject: 6303
Posted: 28 November 2007 at 10:36am

Sara,

We've actually just pre-released this patched build for everyone, and it's available in the registered user area of our website.
]]> Wed, 28 Nov 2007 10:36:09 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11208&title=tagsubject-not-filtering-properly#11208 <![CDATA[:tagsubject not filtering properly : Hi Roberto...Can you confirm if...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11205&title=tagsubject-not-filtering-properly#11205 Author: scharette
Subject: 6303
Posted: 28 November 2007 at 8:28am

Hi Roberto...

Can you confirm if everything still looks like it is working after the changes?  If so I really do need to get my hands on the patch....it took me bit to narrow down what was occurring to report it to you....so I have a few guys looking for some answers...

I appreciate your assistance and if you feel it is better to hold off installing the patch please just let me know...otherwise if possible please provide me where to download it.

Thank you again for all your quick responses here. 

Sara
]]> Wed, 28 Nov 2007 08:28:10 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11205&title=tagsubject-not-filtering-properly#11205 <![CDATA[:tagsubject not filtering properly : Sara,We&#039;re testing the patch...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11199&title=tagsubject-not-filtering-properly#11199 Author: LogSat
Subject: 6303
Posted: 27 November 2007 at 9:56am

Sara,

We're testing the patch internally, and so far everything seems to work just fine. We'll make it available publicly most likely tomorrow if QA continues to go smoothly. If you'd like to receive it sooner, please let us know.
]]> Tue, 27 Nov 2007 09:56:37 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11199&title=tagsubject-not-filtering-properly#11199 <![CDATA[:tagsubject not filtering properly : I appreciate the prompt response....you...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11194&title=tagsubject-not-filtering-properly#11194 Author: scharette
Subject: 6303
Posted: 26 November 2007 at 8:09pm

I appreciate the prompt response....you guys are a pleasure to work with.

Look forward to an update when you have one :)

Sara
]]> Mon, 26 Nov 2007 20:09:37 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11194&title=tagsubject-not-filtering-properly#11194 <![CDATA[:tagsubject not filtering properly : Sara,We were able to duplicate...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11189&title=tagsubject-not-filtering-properly#11189 Author: LogSat
Subject: 6303
Posted: 26 November 2007 at 4:25pm

Sara,

We were able to duplicate the behavior, and you're correct, there is indeed a problem. The keyword filter (along with the Bayesian/Image/SURBL filters) is not being checked when there is a single whitelisted recipient in an email, and the recipient has one of the :tag options set.

We'll try to have a patch ready as soon as possible, hopefully within the next 24 hours.
]]> Mon, 26 Nov 2007 16:25:15 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6303&PID=11189&title=tagsubject-not-filtering-properly#11189