Scott,

Send me your log off-list and I'll parse it with DLAnalyzer so that we are both seeing data generated from the same app.  Seems like a logical place to start.

Matt



Scott Fisher wrote:
Stats:

     AHBL-PROXIES-ALL            901
     AHBL-PROXIES-LAST           908   last higher
     BLITZEDALL-ALL              624    This is what I'm used to.
     BLITZEDALL-LAST             602 
     CBL-ALL                    4000
     CBL-LAST                   4017     last higher
     DSBL-ALL                   3607
     DSBL-LAST                  3628    last higher
     ORDB-ALL                     29     what I'm used to
   ORDB-LAST                    28     
     SPAMCOP-ALL                4744       
     SPAMCOP-LAST               4784    last higher

global.cfg lines:
AHBL-PROXIES-LAST    	dnsbl	%IP4R%.dnsbl.ahbl.org	127.0.0.3       0	0
AHBL-PROXIES-ALL    	ip4r    dnsbl.ahbl.org		127.0.0.3       0	0
CBL-LAST		dnsbl	%IP4R%.cbl.abuseat.org		127.0.0.2   50	0
CBL-ALL		ip4r    cbl.abuseat.org		127.0.0.2  18	0
DSBL-LAST	dnsbl	%IP4R%.list.dsbl.org	127.0.0.2  0	0
DSBL-ALL		ip4r	list.dsbl.org		127.0.0.2  0	0
ORDB-LAST	dnsbl	%IP4R%.relays.ordb.org	127.0.0.2	0	0
ORDB-ALL	ip4r	relays.ordb.org		127.0.0.2	0	0
SPAMCOP-LAST	dnsbl	%IP4R%.bl.spamcop.net	127.0.0.2	60	0
SPAMCOP-ALL	ip4r	bl.spamcop.net		127.0.0.2	30	0

IPBYPASS  ... none
Whitelisting ... only true whitelisted items are my internal mailserver (all e-mail forwarded past Imail)

Unfortuantely I didn't change my ACTIONS from the -DYNA to the -LAST, so I don't have logs to fall back on (yet).

Scott Fisher
Director of IT
Farm Progress Companies

  
[EMAIL PROTECTED] 06/08/04 03:26PM >>>
        
Scott,

That's odd and it points to a problem somewhere.  The ALL tests should 
hit every LAST hit and then some extra.  I generally see about 1% to 2% 
more for the ALL tests across the board (not percentage points, but a 
percentage difference).  Here are some examples from yesterday's stats:

SPAMCOP(ALL)............30,250.......56.71%
SPAMCOP(LAST)...........29,926.......56.11%
XBL(ALL)................22,201.......41.62%
XBL(LAST)...............21,891.......41.04%
DSBL(ALL)...............20,074.......37.64%
DSBL(LAST)..............19,771.......37.07%
NJABL-PROXIES(ALL).......6,610.......12.39%
NJABL-PROXIES(LAST)......6,459.......12.11%
SORBS-SOCKS(ALL).........4,922........9.23%
SORBS-SOCKS(LAST)........4,816........9.03%

Maybe you could post your config lines for examples where you saw LAST 
score higher than ALL just to make sure.  I suppose that other factors 
like IPBYPASS or some some whitelist settings in combination with how 
you get your stats could have an effect, but that would be a 
config/method that I am unfamiliar with.

Matt



Scott Fisher wrote:

  
-Matt,

I've converted my -DYNA tests to -LAST and have observed an unexpected result.
Before the -DYNA tests totals would usually be a few less than the -ALL test.
Now the -LAST test totals are usually a few more than the -ALL tests.

I can account some of these for having my domain name used as the from address. But this doesn't account for all of them.





Scott Fisher
Director of IT
Farm Progress Companies

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


 

    

  

-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

Reply via email to