RE: Message Screener Q

  • From: "Mark Morgan" <MMorgan@xxxxxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 7 Dec 2005 15:33:01 -0800

 


Hey Tom,

Found a way to filter words, since it is a literal string filter I add a space 
before and after the string 'win' so now if there is no space before and after 
the string it will not filter it. Not a perfect solution but it adds more 
options.


Mark 

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, December 07, 2005 1:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Message Screener Q

http://www.ISAserver.org

Hi Mark,

Yea, "keystring" would have been better :)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: Mark Morgan [mailto:MMorgan@xxxxxxxxxxxxxxxxxxxxx]
> Sent: Wednesday, December 07, 2005 3:00 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Message Screener Q
> 
> http://www.ISAserver.org
> 
>  
> Thanks Tom,
> 
> I was afraid of that, I guess MS should have not used keyword to 
> describe this function.
> 
> 
> Mark
> 
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Wednesday, December 07, 2005 12:49 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Message Screener Q
> 
> http://www.ISAserver.org
> 
> Hi Mark,
> 
> It filters strings, not words. So if the 'win' string it found, it 
> triggers the rule.
> 
> HTH,
> Tom
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> **Who is John Galt?**
> 
>  
> 
> > -----Original Message-----
> > From: Mark Morgan [mailto:mmorgan@xxxxxxxxxxxxxxxxxxxxx]
> > Sent: Wednesday, December 07, 2005 2:34 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Message Screener Q
> > 
> > http://www.ISAserver.org
> > 
> > Hello All,
> > 
> > I have setup message screener using keyword filtering, I setup a 
> > keyword to forward if triggered with an email addr of 
> > administrator1@xxxxxxxxxx for rule #1 and administrator2@xxxxxxxxxx 
> > for rule #2, I can then determin what rule triggered the filtering 
> > without looking at any logs, anyway I get an filtered message with 
> > "windows" in the header that was triggered by the keyword "win"
> > without the quotes. is this normal behaver to filter any word with 
> > "win" in it or that starts with "win"????? Do I need to add
> quotes???
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as: 
> > tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: 
> mmorgan@xxxxxxxxxxxxxxxxxxxxx To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.371 / Virus Database: 267.13.12/194 - Release
> Date: 12/07/2005
>  
> 
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.371 / Virus Database: 267.13.12/194 - Release
> Date: 12/07/2005
>  
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: 
> tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
mmorgan@xxxxxxxxxxxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.13.12/194 - Release Date: 12/07/2005
 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.13.12/194 - Release Date: 12/07/2005
 


Other related posts: