One thing is to add zen.spamhaus.org (removing cbl, sbl and perhaps njabl). It's the newer list from spamhaus ZEN IP4R zen.spamhaus.org * 7 0
You'd probably be best off comparing your global.cfg to Declude's current globabl.cfg. -----Original Message----- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Imail Admin Sent: Wednesday, July 28, 2010 1:30 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] What's wrong with my Declude? Hi, We've been using Declude JM/AV with Imail for a long time. The current versions are Imail 2006.23 and Declude 1.63. I don't spend much time tweaking the system any more -- it's a small server that only handles about 40 domains (none of them heavy users). Anyway, lately (last couple of weeks) I've noticed more spam getting through. A lot more. Everything seems to be working as always, but it's not as effective. I'm looking for advice on how to make this effective without spending either big bucks or investing huge amounts of time. Any advice? Here is my DL Analyzer report: Total Messages Processed: 7,487 Messages That Failed Defined Test(s): 7,404 Percentage That Failed Defined Test(s): 98.89% Average Message Weight: 42 Average Message Weight/Failed: 42 TEST # FAILED PERCENTAGE CATCHALLMAILS 7,404 98.89% IPNOTINMX 7,306 97.58% WEIGHT4 6,791 90.70% WEIGHT5 6,726 89.84% WEIGHT7 6,652 88.85% WEIGHT8 6,554 87.54% WEIGHT10 6,481 86.56% WEIGHT12 6,282 83.91% NOLEGITCONTENT 6,239 83.33% WEIGHT15 6,147 82.10% WEIGHT20 5,930 79.20% WEIGHT20R 5,930 79.20% BARRACUDA 5,917 79.03% WEIGHT30 5,534 73.91% WEIGHT30R 5,534 73.91% INV-URIBL 5,427 72.49% SPFUNKNOWN 5,290 70.66% SNIFFER 4,625 61.77% CBL 4,121 55.04% UCEPROTECT-2 3,840 51.29% UCEPROTECT-3 3,702 49.45% SPAMCOP 3,659 48.87% UCEPROTECT-1 3,355 44.81% REVDNS 2,467 32.95% CMDSPACE 2,290 30.59% SUBCHARS-50 2,227 29.74% SUBCHARS-55 1,787 23.87% SPFPASS 1,664 22.23% SORBS-WEB 1,574 21.02% SUBCHARS-60 1,441 19.25% SORBS-DUHL 1,086 14.51% FIVETEN-SRC 1,085 14.49% FROMNOMATCH 1,072 14.32% NOPOSTMASTER 886 11.83% NOABUSE 728 9.72% SUBSPACE-12 592 7.91% BADHEADERS 583 7.79% SURBL 564 7.53% DYNHELO 541 7.23% WEIGHT7R 505 6.75% NONENGLISH 500 6.68% IMP-SPAM 392 5.24% SPFFAIL 342 4.57% WEIGHT10R 334 4.46% SORBS-SPAM 325 4.34% WEIGHT8R 293 3.91% SUBSPACE-15 286 3.82% WEIGHT4R 269 3.59% WEIGHT5R 245 3.27% WEIGHT15R 217 2.90% SPAMCANNIBAL 217 2.90% HELOBOGUS 217 2.90% SBL 205 2.74% SUBSPACE-17 201 2.68% WEIGHT12R 174 2.32% AHBL 158 2.11% SPAMHEADERS 152 2.03% BADWHOIS 133 1.78% FIVETEN-OPTIN 113 1.51% DSN 57 0.76% BONDEDSENDER 46 0.61% ROUTING 36 0.48% SIZE-300K 33 0.44% BASE64 32 0.43% SIZE-500K 20 0.27% IADB 19 0.25% AHBL-DOMAINS 15 0.20% SIZE-1MB 12 0.16% CONTSPACES 4 0.05% NJABL 4 0.05% BADCTYREVDNSTO 1 0.01% Thanks, Ben --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
