Scott, Send me your log off-list and I'll parse it with DLAnalyzer so that we are both seeing data generated from the same app. Seems like a logical place to start. Matt Scott Fisher wrote: Stats: AHBL-PROXIES-ALL 901 AHBL-PROXIES-LAST 908 last higher BLITZEDALL-ALL 624 This is what I'm used to. BLITZEDALL-LAST 602 CBL-ALL 4000 CBL-LAST 4017 last higher DSBL-ALL 3607 DSBL-LAST 3628 last higher ORDB-ALL 29 what I'm used to ORDB-LAST 28 SPAMCOP-ALL 4744 SPAMCOP-LAST 4784 last higherglobal.cfg lines: AHBL-PROXIES-LAST dnsbl %IP4R%.dnsbl.ahbl.org 127.0.0.3 0 0 AHBL-PROXIES-ALL ip4r dnsbl.ahbl.org 127.0.0.3 0 0 CBL-LAST dnsbl %IP4R%.cbl.abuseat.org 127.0.0.2 50 0 CBL-ALL ip4r cbl.abuseat.org 127.0.0.2 18 0 DSBL-LAST dnsbl %IP4R%.list.dsbl.org 127.0.0.2 0 0 DSBL-ALL ip4r list.dsbl.org 127.0.0.2 0 0 ORDB-LAST dnsbl %IP4R%.relays.ordb.org 127.0.0.2 0 0 ORDB-ALL ip4r relays.ordb.org 127.0.0.2 0 0 SPAMCOP-LAST dnsbl %IP4R%.bl.spamcop.net 127.0.0.2 60 0 SPAMCOP-ALL ip4r bl.spamcop.net 127.0.0.2 30 0 IPBYPASS ... none Whitelisting ... only true whitelisted items are my internal mailserver (all e-mail forwarded past Imail) Unfortuantely I didn't change my ACTIONS from the -DYNA to the -LAST, so I don't have logs to fall back on (yet). Scott Fisher Director of IT Farm Progress Companies[EMAIL PROTECTED] 06/08/04 03:26PM >>>Scott, That's odd and it points to a problem somewhere. The ALL tests should hit every LAST hit and then some extra. I generally see about 1% to 2% more for the ALL tests across the board (not percentage points, but a percentage difference). Here are some examples from yesterday's stats: SPAMCOP(ALL)............30,250.......56.71% SPAMCOP(LAST)...........29,926.......56.11% XBL(ALL)................22,201.......41.62% XBL(LAST)...............21,891.......41.04% DSBL(ALL)...............20,074.......37.64% DSBL(LAST)..............19,771.......37.07% NJABL-PROXIES(ALL).......6,610.......12.39% NJABL-PROXIES(LAST)......6,459.......12.11% SORBS-SOCKS(ALL).........4,922........9.23% SORBS-SOCKS(LAST)........4,816........9.03% Maybe you could post your config lines for examples where you saw LAST score higher than ALL just to make sure. I suppose that other factors like IPBYPASS or some some whitelist settings in combination with how you get your stats could have an effect, but that would be a config/method that I am unfamiliar with. Matt Scott Fisher wrote:-Matt, I've converted my -DYNA tests to -LAST and have observed an unexpected result. Before the -DYNA tests totals would usually be a few less than the -ALL test. Now the -LAST test totals are usually a few more than the -ALL tests. I can account some of these for having my domain name used as the from address. But this doesn't account for all of them. Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== |
- [Declude.JunkMail] LAST vs DYNA ip4r tests Scott Fisher