On 25 Jul 2004 at 9:15, Pete Weiss wrote:

Hello Pete,

> Rule # 1:
>
> Don't use content filters to check for postings from "spammers" (but use
> list definition keyword FILTER= ALSO,rfc822_address,wild_card_addresses )

I know and we tried but started to receive the postings as error
reports in that case like:

----- receive error sample -----
> The enclosed  message, found in  the ME-PLATFORM  mailbox and shown
> under the spool ID 8392990 in the system log, has been identified as a
> possible delivery error notice for the following reason:  mail origin
> is listed in the "Filter=" list header keyword (or its default value
> for the ME-PLATFORM list).
------ end sample -------

beating our intention of the filter settings :-/

> Question # 1
>
> Do you really want non-subscribers to be moderated? Or maybe just
> rejected? If the latter, SEND= PRIVATE might be better.

We had that setting but changed it due to the nature of the list.
It is a list for people suffering from Chronic Fatique Syndrome
(CFS/ME) with public archives to serve the people that suffer as
much as possible.
Non-members can post now (moderated) and receive a personal note on
how to subscribe at the same time.

> Hint # 1
>
> Don't use content filters for anti-spam (which I believe is what it says
> also in the manual).

I also read it indeed but it works well in specific cases and
strangly enough the help in the template wizzard even gives
examples for it like:

  To: [log in to unmask]
  Action: DISCARD This guy is a spammer

and

  Text: Click here to be removed
  Action: REJECT Buzz off, spammer.

That was why we decied to give it a try also instead of the filter=
keyword and it works just fine except for this specific rule. But
maybe that changing:

 > From: *@ATTBI.COM
 > Action: REJECT Possible spam detected, message not accepted

to something like:

  From: *@ATTBI.COM*
  Action: REJECT Possible spam detected, message not accepted

would be an option to try as John suggested. I'll try that out.

Thanks and regards,
Joop Reijenga.

ps- a cc to my address when replying would be appreciated since I'm
     on INDEX.