Re: [Declude.JunkMail] SpamManager test

[Bill Landry]

The Alligate test applied 30 points to the total message weight, 20 points for failing AlligateSpam1 and 10 points for failing AlligateSpam2.  The weight that Alligate returns to Declude is how Declude determines what Alligate tests, if any, were failed and what weight to apply to failed tests.  If Alligate were to return -18 to Declude, Declude would know to apply 20 points to the total message weight for failing the AlligateAdult1 test.   HTH,   Bill ----- Original Message ----- From: Mike Gable To: [EMAIL PROTECTED] Sent: Monday, July 07, 2003 12:58 PM Subject: RE: [Declude.JunkMail] SpamManager test It's making some sense to me now. However, I need a little more help understanding the following example in the headers of a failed message:   X-Alligate-In: FAILED - Score Adult: 9 (Req: 18) Spam: 44 (Req: 18) Tot: 53 (Req: 25) X-Alligate-Tracking: A72AF5B79114391E X-Alligate-Signature: -1561585576 X-Alligate-SpoolFile: Db02e39d201186146.SMD X-Alligate-Sender: [EMAIL PROTECTED] [216.87.56.33] X-RBL-Warning: ALLIGATESPAM1: Message failed ALLIGATESPAM1: 53. X-RBL-Warning: ALLIGATESPAM2: Message failed ALLIGATESPAM2: 53.   Are the following rules applied to the spam score of 44 or the total exit score of 53?   ALLIGATESPAM1  external >17 "D:\IMail\Alligate\NoXMail.exe"    20 0 ALLIGATESPAM2  external >39 "D:\IMail\Alligate\NoXMail.exe"    10 0 Also, if the Adult score was 18 how would Declude know the exit code was "-18" and thus trigger this rule?:   ALLIGATEADULT1  external <-17 "D:\IMail\Alligate\NoXMail.exe"    20 0   Thanks!   Mike    -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of John Tolmachoff (Lists) Sent: Thursday, July 03, 2003 7:06 PM To: 'Mike Gable' Cc: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SpamManager test The greater than and less than signs are used for weighting. The negative sign is for the return code, in this case -17.   Translated, <-17 means less than negative 17.   Alligate with the Declude setup will return a negative number for messages deemed to be adult spam in nature, and a positive number for normal spams. (Is there such a thing as normal spam?) By doing that, you can create separate tests and separate actions for regular spam and adult spam.   The question about weights applied is using the greater than and less than signs, if a message has a return code of 40+, that is greater than 17 AND greater than 39. The weights I use in my recommendations take that into account.   The idea is that if it fails Alligate, you get 20. If higher, add more weight.   NOTE: SpamCheck uses negative return codes in a different way, so do not get the 2 confused. That is the beauty of Declude, allows options and customizations.   One more thing, if you are just starting out with this, my recommendation is to adjust the hold weights to hold more and delete less until you see what needs to be adjusted.   Does that help, or add more confusion?   John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com   -----Original Message----- From: Mike Gable [mailto:[EMAIL PROTECTED] Sent: Thursday, July 03, 2003 6:34 PM To: [EMAIL PROTECTED] Cc: 'John Tolmachoff (Lists)' Subject: RE: [Declude.JunkMail] SpamManager test   Scott and John:    What does the  <-  combination mean?   Also, if the message has an exit code of 17+ why would it get a weight of 20, and if it had an exit code of 39+ why would it get a weight of 20 AND 10 (total=30)? Why not 17+ gets 10 and 39+ gets 20?   I am concerned about weights skyrocketing so that legitimate email could get deleted (weight 35 in my case).   Thanks for your help and your response.                                   -Mike