anyway to choose not quarantine within a filter?
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6299
Printed Date: 02 July 2025 at 8:50pm
Topic: anyway to choose not quarantine within a filter?
Posted By: Stupid
Subject: anyway to choose not quarantine within a filter?
Date Posted: 15 November 2007 at 12:31pm
For example, I keep getting emails with keyword like "pen!s" and "big dic'k." So many to a point that that the quarantine has hundreds of spam and there's no easy way to find the legit ones.
I just want to completely drop them whenever I see them, not quarantine. Is there a way to setup the SFI so that once certain conditions are met, it just delete the emails.
If I put these in the keyword filter, those spam will still show up in quarantine because i cannot drop all keyword filtered emails.
|
Replies:
Posted By: LogSat
Date Posted: 15 November 2007 at 4:47pm
This is an easy one :-)
Please see the following section of the manual that talks about the keywords and the NULL modifier (and please note the **double** colon that must be used instead of the single colon):
Keywords Filter - You
can check email content and subject header for specific keyword and/or
phrases. If found, the email is rejected. You can also use Regular Expressions
(RegEx). If the keyword file does not exist it will be created. The
file is reloaded every minute. The contents of the file will be loaded
in the memo box, allowing you to make changes to the file. This list
supports the ::NULL option to send emails in a black hole. If an entry
is in the form keyword::NULL
it will cause all emails to be accepted and then sent to NULL right
away. Such emails will not cause NDRs, they will not be quarantined,
they will not be seen by the users. If an entry is in the form keyword::NoNDR such emails will not cause NDRs as in the DoNotSendNDROnQuarantine parameter in the ini file. This list supports the ::Honeypot
option, which will cause the sender's IP address to be automatically
blacklisted in the future. Please note that unlike in other cases,
with the keyword list you must enter the ":" symbol twice to specify the extra tag.
-------------
Roberto Franceschetti
http://www.logsat.com" rel="nofollow - LogSat Software
http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP
|
Posted By: Stupid
Date Posted: 16 November 2007 at 9:34am
Thank you for the response and it's a nice trick. here's another thing. Majority of my spam is caught under honeypot. I think honeypot filter takes proceeding than keyword which only capture 1%.
Should I stop quarantine honeypot attractions? I guess my goal is to reduce the amount of quarantine so that people can at least look at them.
|
|