Filter not working

[desertgal]

I've looked on the forum & don't see this anywhere.
I have a filter to delete mail based on the junk score "Junk score more than" it is set at +13 but I'm still getting mail in the Junk box with scores over this amount. Also I have a filter to run on the headers to delete mail with "X-Poco scored:" This doesn't work either. Both filters are after "On all mail run Junk". The messages are going to the junk folder, I'd just like them deleted automatically.
Poco Version 4.0.0.3350.

[Michael]

Are these filters run as Incoming message filters? Can you tell it any messages being deleted (you could use the "View Mail on Server" feature to check the number of messages and then compare the results after the filters are run).

I suspect that the act of moving the messages to the Junk Mail box (by the Junk Mail filters) is considered a terminal action and that subsequent filters will not act on the message. You should be able to easily test this by adding a filter with an action of "Dialog Box with Text" (add this filter after the junk mail filters and with the same criteria as the delete filters).

[Guest]

I can't seem to create a filter as you suggested. When I put "Dialog Box with Text" in the perform section, what goes in the box under it? If I leave it empty it isn't accepted.
The filters are run on incoming mail. The only messages that are being deleted are the ones from banned senders. The banned subjects & banned domains have never worked for me. These filters are all before the "On all mail run Junk". The only filters after the Junk filter are the ones based on the Junk score.

[Michael]

The box below the "Dialog Box with Text" is where you enter the text you want displayed. (This filter action will cause a message box to be displayed when the filter runs, it's a good way to test to see if a filter is actually being fired). Simply put a message like "Message would be deleted" in the box belox the "Dialog with Text".

With respect to the Banned Subjects and Banned Domains, these should run as part of the Junk Mail filters themselves provided you have the junk mail filtering setup to run them. To check this open the "Junk Mail Filters" (from the Tools menu), go to the "General Settings" tab and see if the "Run standard non-Bayesian filters" box is checked, it is then the Banned Subjects and Banned Domains should be being processed by the junk mail filters.

You could also check this by looking at the full headers and checking the "X-Poco-Score-Detail:" headers (these are added for each condition Poco detects which increments or decrements the junk score (held in the X-Poco-Scored header).

[desertgal]

I got the filter set up for the dialog box, thanks. Haven't tried it yet though.
As for the other part about the banned subjects & domains, I have the non-standard box checked. I did that sometime ago to fix something else.
This is what shows in the headers for "X-Poco Scored"


X-Poco-Score-Detail: -3 [%BAYES%=P=0;T=85;BIAS=+21] (%bayes% P=0;T=85;Bias=+21)
X-Poco-Score: +19
X-Poco-Score-Detail: +2 [FROM=%ADDRESSBOOKS%] (From %addressbooks%)
X-Poco-Scored: +19
X-Poco-Score-Exceeds: 14

I have the filter set for more than +13 so this should have been deleted. Doesn't this filter have to be after the Junk filter so that it has a score to work with?? Is there a way to not move the Junk before this filter runs??

[Michael]

I got the filter set up for the dialog box, thanks. Haven't tried it yet though.
As for the other part about the banned subjects & domains, I have the non-standard box checked. I did that sometime ago to fix something else.
This is what shows in the headers for "X-Poco Scored"

X-Poco-Score-Detail: -3 [%BAYES%=P=0;T=85;BIAS=+21] (%bayes% P=0;T=85;Bias=+21)

This indicates the Bayesian filters thought the message was not junk. You must have your good score set to 3 (which is treated as a negative when accumulating the total score).

X-Poco-Score: +19

This is the overall score Poco calculated for the message.

X-Poco-Score-Detail: +2
[FROM=%ADDRESSBOOKS%] (From %addressbooks%)

The sender's address was not in one of your address books, this results in a score of +2.

X-Poco-Scored: +19
X-Poco-Score-Exceeds: 14

Same as "X-Poco-Score:" above with the additional item reflecting the overall determination that this message is junk. What is missing are the remaining rules that resulted in another +20 score being added. Do you have any filters that have an action of "Increase Junk Score"?

I have the filter set for more than +13 so this should have been deleted. Doesn't this filter have to be after the Junk filter so that it has a score to work with?? Is there a way to not move the Junk before this filter runs??

What you might want to do is setup an OnAdd event for the Junk Mail mailbox (Tools | Events). You might be able to delete the message using this functionality.

[desertgal]

Ok, I just changed the Good Score to 3 it was at 4 or 5.
I have a filter to Increase the Junk Score if the Content Type is Not Plain. It seems like most of the junk is either ASCII or Multi-part Mixed.
I just checked mail & this is from one of the headers

X-Poco-Spam-DNSBL: Received from IP address (81.172.56.192)
Found in sbl-xbl.spamhaus.org (+15)
Found in bl.spamcop.net (+15)
Not in list.dsbl.org (+0)
Not in dnsbl.njabl.org (+0)
Found in dnsbl.sorbs.net (+15)
Debug - v1.19 #spamscore 45 #waitattempt 5 #timeout 8 #mode 1
X-Poco-Scored: +45
X-Poco-Score-Detail: -3 [%BAYES%=P=0;T=85;BIAS=+30] (%bayes% P=0;T=85;Bias=+30)
X-Poco-Score-Detail: +3 [X-MAILER=] (X-Mailer )
X-Poco-Score: +67
X-Poco-Score-Detail: +2 [FROM=%ADDRESSBOOKS%] (From %addressbooks%)
X-Poco-Scored: +67
X-Poco-Score-Exceeds: 14

It was placed in the Junk Mailbox, but not deleted.

[saoir]

X-Poco-Score: +19

Sorry to cut in but could you tell me at what score value Barca decides to move email to the junk folder ?

BTW: my Baysian settings are: 0.9, 2.0, 20, 0.

[Michael]

Ok, I just changed the Good Score to 3 it was at 4 or 5.
I have a filter to Increase the Junk Score if the Content Type is Not Plain. It seems like most of the junk is either ASCII or Multi-part Mixed.
I just checked mail & this is from one of the headers

X-Poco-Spam-DNSBL: Received from IP address (81.172.56.192)
Found in sbl-xbl.spamhaus.org (+15)
Found in bl.spamcop.net (+15)
Not in list.dsbl.org (+0)
Not in dnsbl.njabl.org (+0)
Found in dnsbl.sorbs.net (+15)
Debug - v1.19 #spamscore 45 #waitattempt 5 #timeout 8 #mode 1
X-Poco-Scored: +45

Ok, this is starting to make more sense, you are also running the Spam-DNSBL script. In this case it has found three matches each of which have increased the junk score by 15 points (thus a total after the script has run of J+45).

X-Poco-Score-Detail: -3 [%BAYES%=P=0;T=85;BIAS=+30] (%bayes% P=0;T=85;Bias=+30)

Here Poco's Bayesian filter has run and thinks the message is not junk and subtracted 3 from the overall score (which is now +42).

X-Poco-Score-Detail: +3 [X-MAILER=] (X-Mailer )

Poco's standard built in junk mail filters have added 3 to the junk score because the message does not have an "X-Mailer" header (this identifies the client email program used to create the message). The score at this point should be +45.

X-Poco-Score: +67

I'm confused at this point as to why the score should be set to +67, something has added an additional 22 points to the junk score. I cannot tell from what you've posted what that could be.

X-Poco-Score-Detail: +2 [FROM=%ADDRESSBOOKS%] (From %addressbooks%)

Here the junk mail filters have checked to see if the message is from someone in your address books. It has determined that the sender is not and so has added 2 to the junk score (now +47 by my reckoning).

X-Poco-Scored: +67

Poco thinks the final overall score for this message is +67.

X-Poco-Score-Exceeds: 14

Poco says that the message score exceeds the threshold you set and has moved the message to the junk mail folder.

It was placed in the Junk Mailbox, but not deleted.

It is entirely possible that this message was not deleted because of the way Poco's filters work. Once an incoming message filter moves a message from the In mailbox it becomes unavailable to subsequent incoming message filters. To overcome this you could try setting up an OnAdd event for the Junk Mail mailbox (Tools | Events). This might allow you to delete the message.

[Michael]

X-Poco-Score: +19

Sorry to cut in but could you tell me at what score value Barca decides to move email to the junk folder ?

BTW: my Baysian settings are: 0.9, 2.0, 20, 0.

This is entirely dependent on the "Sensitivity" setting you have enabled within the Junk Mail Filters. You may have used one of the three builtin settings (High = 10, Medium = 12, Low = 14) or a custom setting where you choose the threshold.

PS: I'm not 100% certain the values associated with High, Medium and Low are correct, I think they are but this is based on my recollection, not any firm information I have.

[saoir]

PS: I'm not 100% certain the values associated with High, Medium and Low are correct, I think they are but this is based on my recollection, not any firm information I have.

Thanks Michael.

I have been asking everywhere whether there is any Help file for this stuff and I cannot get any response... and also if there is any FAQ ? There seems to be a FAQ for almost everything except this critical element of the program.

[Michael]

PS: I'm not 100% certain the values associated with High, Medium and Low are correct, I think they are but this is based on my recollection, not any firm information I have.

Thanks Michael.

I have been asking everywhere whether there is any Help file for this stuff and I cannot get any response... and also if there is any FAQ ? There seems to be a FAQ for almost everything except this critical element of the program.

I thought I'd documented this in the FAQ but couldn't find it. The FAQ is very outdated, I have been so swamped at work I barely have time to answer questions in the forums let alone anything else. Unfortunately I don't see this changing for quite some time.