Has anyone seen this before - where a test name is preceded by a character in the logs (in this case : nIPNOTINMX) ?
That indicates a negative -- meaning that the E-mail did not fail the test, and had the weight change as a result. So:
06/09/2004 00:05:57 Q8c972f36011c17e2 SBL:6 CMDSPACE:3 nIPNOTINMX:-2 GIBBERISH:4 HOUR2:3 . Total weight = 14.
The E-mail did not fail the IPNOTINMX test, and had 2 points subtracted from the weight as a result.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
