Hi; Are you interested in knowing the tests that have failed or which items within a test have failed.
I don't think you can know all the items (e.g. filters) that you have and which ones have failed. If you have a filter file then the header will only show one of the filters and not all the ones that have failed.. Example: X-RBL-Warning: FILTER-SUBJECT: Message failed FILTER-SUBJECT test (272) X-RBL-Warning: FILTER-BODYURL: Message failed FILTER-BODYURL test (278) This shows line 278 failing. This spam had failed many tests wihin the filter file but it only shows one of them that has failed. At least that is what I think is the case. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff Sent: Thursday, January 30, 2003 1:53 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] How do I make sure all of the failed tests appear in the headers? Add this line in the Global.cfg: XINHEADER X-Tests-Failed: %TESTSFAILED% John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED]] On Behalf Of Chuck Schick > Sent: Thursday, January 30, 2003 10:40 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] How do I make sure all of the failed > tests appear > in the headers? > > Scott: > > Here is an example message result. > > Here is what the log file shows: > > 01/30/2003 09:32:43 Q53873aa Msg failed HELOBOGUS (Domain terminal has > no MX/A records.). 01/30/2003 09:32:43 Q53873aa Msg failed BADHEADERS > (This E-mail was sent from a broken mail client [8040000e].). > 01/30/2003 09:32:43 Q53873aa Msg failed REVDNS (This E-mail was sent from a > MUA/MTA 64.238.119.21 with no reverse DNS entry.). > 01/30/2003 09:32:43 Q53873aa Msg failed WEIGHT10 (Weight of 12 reaches > or exceeds the limit of 10.). > > Here is what the message header says: > > X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail > client [8040000e]. [Possibly SPAM - Failed RDNS lookup] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for > spam. > X-Note: Total spam weight of this E-mail is 12. > > And this is what the junkmail warnings say: > > X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail > client [8040000e]. > > What I want is for every failed test to show up in the warnings as I > want to > really start tracking the false positives and see if I can reduce the number > of messages held. > > Chuck Schick > Warp 8, Inc. > 303-421-5140 > www.warp8.com > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott > > Perry > > Sent: Thursday, January 30, 2003 10:47 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] How do I make sure all of the failed > > tests appear in the headers? > > > > > > > > >We hold at a weight of 10 and delete at 20 and I use Spam > > review to clean > > >out the hold folder. I have noticed lately that sometimes a > > message shows > > >that it has failed only one test and has a weight of 10+ (we > > have no single > > >test with a weight of 10) so obviously I am not getting all > > of the tests > > >recorded in the headers. How do I go about making sure that > > all failed > > >tests get recorded. > > > > Do you mean "The X-Spam-Tests-Failed: header showed that only one > > test failed" (which would indicate a problem), or "There was only > > one > > X-RBL-Warning: header" (which would be quite normal)? > > > > What does the Declude JunkMail log file show for one of these E-mails? > > -Scott > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
