Forums & Blog

Hi maybe someone can shed some light on this for me.

FIrstly Im running kevens kmparse software which puts in headers based on frequency, white/blacklist etc.  2 headers are available 

X-KMparse: NEWADD , FIRSTCONTACT , 1 , ORIGIN-RU , SA-OK (3.5/4.0) , KMP-FAIL
X-KMparse-Score: 19.500

 I created a custome filter Namely  X-KMparse:   with a valus of KMP-FAIL and a score of 10 this does not get added to the score.

I also created on for KMP-OK and one for WHITELISTED which are also possibilities in this header but none of these work. Does the custom headers look for the exact header or content within the header ???

I also created 3 content rules high med and low, with the intent to forward the emails indicated by the spam settings to an email address called mail and using plus addressing get them sent to mail+low@ mail+med@ and Mail+High@somedomain.co.za. this seems to work to a point, I have created these content filters under 6 domains, however I do not beleive that these emails are the full amount of emails entering the system. In short I am trying to get all emails marked as spam etc copied to a folder and then another folder with all the emails so I can see what is slipping past the smap settings, without having to go into each users mail account and check it manually.

 Any Ideas...

Sorry no comeback after 5 days.. Surely someone can give me an idea on how to resolve this, or is moving from merak to SM a waste of time ?

No, the custom headers do not have to match exatctly, it will do a search.

Is there anything listed in the X-SmarterMail-Spam header in those messages? 

ok kinda figured out what the problem is to a degree..

 ok kmparse executes as the command line so its after the custom headers.. and will not be picked up..duh obviously..

ok so heres the new version of my problem then, kmparse enters multiple words in its header, however the content filtering asks for entries one per line, which when created the rule basically becomes the following

check headers

 All criteria below must be met
- with SA-SPAM or KMP-FAIL or NEWADD  or FIRSTCONTACT in headers

I need it to be the following

 All criteria below must be met
- with SA-SPAM and KMP-FAIL and NEWADD  and FIRSTCONTACT in headers

can this be done ?