We delete held spam after 30 days. If a false positive possibility arrizes, we will use a file - search in our holding bin to identify any messages that have the correct keywords - If we verify the false positive this way we can not only put it back in stream, but also adjust our filtering scheme to compensate. This way we spend almost no time on dealing with the issue (we have very few false positives)... But when a false positive does show up we have everything we need to handle it quickly.
Hope this helps, _M | -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of Mark MItchell | Sent: Wednesday, June 05, 2002 10:51 PM | To: [EMAIL PROTECTED] | Subject: [Declude.JunkMail] Handling Held Spams | | | Hello, | | I was wondering how people handle all the held spam? From | my estimates, my mailserver is holding over 1 million spams | per month. I only have BADHEADERS and MAILFROM set for hold | and rest for warn. Are those the two that most people have | set to hold? Any way to make it so the spam forwards to a | specific email address so I can search it easier if a | customer complains that there message was marked spam? | | Thanks, | Mark | | | --- | [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
