Print Page | Close Window

Whitelist not working

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6331
Printed Date: 02 July 2025 at 9:02pm


Topic: Whitelist not working
Posted By: IKILLSPAM1
Subject: Whitelist not working
Date Posted: 27 December 2007 at 10:57am
12/26/07 23:56:26:006 -- (55724) Bypassed all rules for: user mailto:user@domain.net - @domain.net from mailto:remoteuser@domain.net - remoteuser@domain.net (Whitelisted - Email size exceeded MaxMsgSizeForSpamFiltering)
12/26/07 23:56:27:615 -- (55724) Starting quarantine procedures
12/26/07 23:56:27:740 -- (55724) Created thread (31696) to add email to quarantine
12/26/07 23:56:27:740 -- (31696) Adding to Quarantine file:Qrt161C.tmp
12/26/07 23:56:47:459 -- (31696) EMail from mailto:remoteuser@domain.net - remoteuser@domain.net to user mailto:user@domain.net - @domain.net was received and quarantined. Size: 5948 KB, 6090752 bytes
 
 
Whats up with this?


Replies:
Posted By: Desperado
Date Posted: 27 December 2007 at 1:23pm
 

-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Posted By: LogSat
Date Posted: 27 December 2007 at 3:51pm
Starting from version 3.5.4.728 we introduced the following option in the SpamFilter.ini file:

// New to VersionNumber = '3.5.4.728';
{TODO -cNew : Added option MaxMsgSizeForSpamFiltering in SpamFilter.ini file to whitelist emails that are larger than a specific size}

;Any emails whose text portion exceeds this number of KB will be whitelisted. Most spam emails are small in size, lowering this value may help in reducing the chances of incorrectly blocking valid emails with large attachments
MaxMsgSizeForSpamFiltering=768


The log entry you posted indicates that this email was larger in size than the above value, and was thus allowed to bypass all filtering rules.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: IKILLSPAM1
Date Posted: 02 January 2008 at 8:24am

So Roberto, I understand that but thats not what happened here. If you read the whole log entry I posted the ending says the email was quarantined. I have it set at 300  FYI.

So if it let it go at first because it was larger than 300, why was it then quarantined?

Thanks

Posted By: LogSat
Date Posted: 02 January 2008 at 10:51pm
You are correct, and we did verify that this is a bug. That setting (MaxMsgSizeForSpamFiltering) is
sometimes ignored if an email fails the IP-based tests. We'll have this fixed int he next build of SpamFilter that will be released within the next few days.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: IKILLSPAM1
Date Posted: 03 January 2008 at 11:29am
Thats good news Roberto. Thanks for looking. Look forward to the update.
 
 


Print Page | Close Window