Given this CONFIG File:

BADHEADERS      badheaders      x       x       5       0
SPAMHEADERS     spamheaders     x       x       3       0
SPAMROUTING     spamrouting     x       x       4       0
REVDNS          revdnsexists    x       x       5       0
HEUR10          heuristics      10      x       4       0
HEUR9           heuristics      9       x       4       0
HEUR8           heuristics      8       x       3       0
HEUR            heuristics

WEIGHT10        weight          x       x       10      0
WEIGHT8         weight          x       x       8       0

why doesn't the second log entry report that weight8 and/or weight10 has
been exceeded?

11/04/2001 03:33:31 Qfd3524a Msg failed SPAMROUTING (This E-mail was routed
in a poor manner consistent with spam [20000103].).
11/04/2001 03:33:31 Qfd3524a Msg failed HEUR (Heuristic spam detection level
9 [0.996063]).
11/04/2001 03:33:31 Qfd3524a Msg failed WEIGHT8 (Weight of 8 exceeds the
limit of 8.).
11/04/2001 03:33:31 Qfd3524a Subject: Teen Babes Getting Nasty
11/04/2001 03:33:31 Qfd3524a From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
...
11/04/2001 03:39:42 Qfec315c Msg failed SPAMHEADERS (This E-mail has headers
consistent with spam [60000303].).
11/04/2001 03:39:42 Qfec315c Msg failed SPAMROUTING (This E-mail was routed
in a poor manner consistent with spam [60000303].).
11/04/2001 03:39:42 Qfec315c Msg failed REVDNS (This E-mail was sent from a
mail server with no reverse DNS entry.).
11/04/2001 03:39:42 Qfec315c Subject: Make big money sending
emails...........
11/04/2001 03:39:42 Qfec315c From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED] [EMAIL PROTECTED]

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue
Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

http://www.hm-software.com/

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to