Andy, what is your global.cfg line that produces the total in the header? It doesn't look line mine, and SpamReview has a very specific requirement to report the correct value, e.g.
XOUTHEADER X-Note: Total spam weight of this E-mail is %WEIGHT%. (my implementation of IMail is as a gateway, so everything is "OUT". You may be using XINHEADER.) Also, how about taking apart the rest of the log and your config files and adding up the math manually? Andrew 8) -----Original Message----- From: andyb [mailto:[EMAIL PROTECTED] Sent: Friday, November 28, 2003 11:51 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] holding not deleting I'm looking at Weight of 18 reaches or exceeds the limit of 10. It it is 18, it also exceeds 14, the limit I delete at.... Thanks, andy ----- Original Message ----- From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, November 28, 2003 2:29 PM Subject: RE: [Declude.JunkMail] holding not deleting > > Here is what spam review reports: > > X-RBL-Warning: SPAMCOP: Blocked - see > > http://www.spamcop.net/bl.shtml?69.6.42.52 > > X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL - > > http://blackholes.easynet.nl/errors.html > > X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6636 > > X-RBL-Warning: WEIGHT10: Weight of 18 reaches or exceeds the limit of 10. > > X-RBL-Warning: IPNOTINMX: > > X-RBL-Warning: MYFILTER: Message failed MYFILTER test (17) > > X-RBL-Warning: Total weight: 11 > > Is this what you are looking at, the 17 here: > > X-RBL-Warning: MYFILTER: Message failed MYFILTER test (17) > > That is the line number in the MYFILTER test that caused it to be caught, > not the weight. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
