Will, Just to make sure, your Imail is passing on mail to another server and therefore acting as a gateway that is why you are using OUTBOUND actions correct?
David B www.declude.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Wednesday, April 20, 2005 9:22 AM To: [email protected] Subject: [Declude.JunkMail] PERCENT test confusion I'm trying to understand why my mail server is sending so many messages to the quarantine folders instead of just marking the headers. In fact, the vast majority of my SPAM is going to the spool/spam folder since updating all the declude rules. The only test I have set to HOLD is the PERCENT test and when I look at the messages being quarantined, none of them have a percent symbol in the To: line. Since there are so many messages failing this test, I am concerned that there is legitimate content I am missing, though I have yet to find one from the hundred thousand messages it caught just yesterday. Should I be concerned and does anyone have good insight about how the PERCENT test works? It seems too good to be true that such a simple test would catch so much SPAM. I'm running Imail 8.15 on 2003. Below is a copy of my declude test actions: #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< RBL IP4R TESTS OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> BLITZEDALL WARN CBL WARN DSBL WARN ORDB WARN MXRATE-ALLOW WARN MXRATE-BLOCK WARN MXRATE-SUSPICIOUS WARN SBL WARN SORBS-HTTP WARN SORBS-SOCKS WARN SORBS-MISC WARN SORBS-SMTP WARN SORBS-SPAM WARN SORBS-WEB WARN SORBS-BLOCK WARN SORBS-ZOMBIE WARN SORBS-DUHL WARN SPAMCOP WARN BONDEDSENDER WARN #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< ADDITIONAL RBL IP4R TESTS OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> #MTLDB WARN CSMA-SBL WARN INTERSIL WARN SPAMBAG WARN FIVETENSRC WARN JAMMDNSBL WARN #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< RHBSL TESTS OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> DSN WARN NOABUSE WARN NOPOSTMASTER WARN MAILPOLICE-BULK WARN MAILPOLICE-PORN WARN MAILPOLICE-FRAUD WARN #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< OTHER TESTS OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> BADHEADERS WARN BASE64 WARN BCC WARN CMDSPACE WARN COMMENTS WARN DYNHELO WARN ENCODEDURL WARN HELOBOGUS WARN IPURL WARN MAILFROM WARN PERCENT HOLD REVDNS WARN ROUTING WARN SPAMHEADERS WARN SPFFAIL WARN SPFPASS WARN SUBJECTSPACES WARN SUBJECTCHARS WARN #NONENGLISH WARN #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< FILTERS OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> #SUBJECT WARN #WORD WARN #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< 3RD PARTY OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> #SNIFFER WARN #SPAMCHK WARN #INV-URIBL WARN #<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< TRIGGERS OUTBOUND >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> WEIGHT10 WARN WEIGHT14 WARN WEIGHT20 WARN --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. __________ NOD32 1.1072 (20050420) Information __________ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
