I'm trying to understand why my mail server is sending so many messages
to the quarantine folders instead of just marking the headers.  In fact,
the vast majority of my SPAM is going to the spool/spam folder since
updating all the declude rules.

The only test I have set to HOLD is the PERCENT test and when I look at
the messages being quarantined, none of them have a percent symbol in
the To: line.  Since there are so many messages failing this test, I am
concerned that there is legitimate content I am missing, though I have
yet to find one from the hundred thousand messages it caught just
yesterday.

Should I be concerned and does anyone have good insight about how the
PERCENT test works?  It seems too good to be true that such a simple
test would catch so much SPAM.

I'm running Imail 8.15 on 2003.  Below is a copy of my declude test
actions:

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<  RBL IP4R TESTS OUTBOUND
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

BLITZEDALL              WARN
CBL                     WARN
DSBL                    WARN
ORDB                    WARN
MXRATE-ALLOW            WARN
MXRATE-BLOCK            WARN
MXRATE-SUSPICIOUS       WARN
SBL                     WARN
SORBS-HTTP              WARN
SORBS-SOCKS             WARN
SORBS-MISC              WARN
SORBS-SMTP              WARN
SORBS-SPAM              WARN
SORBS-WEB               WARN
SORBS-BLOCK             WARN
SORBS-ZOMBIE            WARN
SORBS-DUHL              WARN
SPAMCOP                 WARN
BONDEDSENDER            WARN

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<  ADDITIONAL RBL IP4R TESTS
OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

#MTLDB                  WARN
CSMA-SBL                WARN
INTERSIL                WARN
SPAMBAG                 WARN
FIVETENSRC              WARN
JAMMDNSBL               WARN

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<  RHBSL  TESTS OUTBOUND
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

DSN                     WARN
NOABUSE                 WARN
NOPOSTMASTER            WARN

MAILPOLICE-BULK         WARN
MAILPOLICE-PORN         WARN
MAILPOLICE-FRAUD        WARN

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< OTHER  TESTS OUTBOUND
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

BADHEADERS              WARN
BASE64                  WARN
BCC                     WARN
CMDSPACE                WARN
COMMENTS                WARN
DYNHELO                 WARN
ENCODEDURL              WARN
HELOBOGUS               WARN
IPURL                   WARN
MAILFROM                WARN
PERCENT                 HOLD
REVDNS                  WARN
ROUTING                 WARN
SPAMHEADERS             WARN
SPFFAIL                 WARN
SPFPASS                 WARN
SUBJECTSPACES           WARN
SUBJECTCHARS            WARN

#NONENGLISH             WARN

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<  FILTERS OUTBOUND
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

#SUBJECT                WARN
#WORD                   WARN

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<  3RD PARTY OUTBOUND
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

#SNIFFER                WARN
#SPAMCHK                WARN
#INV-URIBL              WARN

#<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<   TRIGGERS OUTBOUND
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

WEIGHT10                WARN
WEIGHT14                WARN
WEIGHT20                WARN

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to