Thanks Sandy. "Later in the week" was pretty soon! I have installed this and have been testing out the new functionality. One question I have is about checking for negative results that have a lt and an ht that are negative. In my early tests it appears that if I set up a few tests like this:
SA-1 external nonzero <blah....> -y -lt (1) -ht 0 -e -f" -1 0 SA-2 external nonzero <blah....> -y -lt (2) -ht (1) -e -f" 0 0 SA-3 external nonzero <blah....> -y -lt (3) -ht (2) -e -f" 0 0 SA-4 external nonzero <blah....> -y -lt (4) -ht (3) -e -f" 0 0 SA-5 external nonzero <blah....> -y -lt (5) -ht (4) -e -f" 0 0 then I get results logged for SA-1 ONLY, none of the others fail even when SA scores are less than -1. Am I missing something here or is there some other way to make this work given the new functionality in spamc32? Or is it that I can only have one result for negative, as in I choose to subtract a fixed score in JM for a range or negatives? So if I use -lt 5 -ht 0 then anything between 0 and -5 will subtract whatever score I choose? Interestingly, I see this for example in the declude.log (I guess for a rounded SA score of -2): nIPNOTINMX:-3 SPAMHEADERS:3 SA-1:-1 . Total weight = -1. (I chose -1 weight on this one) Then below that: Msg failed SA-1 (Message failed SA-1: -2.). Action=LOG. Msg failed SA-2 (Message failed SA-2: -2.). Action=LOG. Msg failed SA-3 (Message failed SA-3: -2.). Action=LOG. Msg failed SA-4 (Message failed SA-4: -2.). Action=LOG. Msg failed SA-5 (Message failed SA-5: -2.). Action=LOG. In another case I see SA-1: -1 and then: 5 Msg failed SA-1 (Message failed SA-1: -1.). Action=LOG. Msg failed SA-2 (Message failed SA-2: -1.). Action=LOG. Msg failed SA-3 (Message failed SA-3: -1.). Action=LOG. Msg failed SA-4 (Message failed SA-4: -2.). Action=LOG. Msg failed SA-5 (Message failed SA-5: -2.). Action=LOG. Am I confused or is Declude confused or both? Hopefully you understand what I'm trying to do here: I'd like to get the rounded negative score from SA and use it to subtract that score in JM. Can it be done or should I just work with a single score from any negative SA result? In a nutshell it appears I can't detect a negative range between any 2 negatives, just between zero and a negative. Thanks, Geoff _____ -----Original Message----- From: Sanford Whiteman [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 10, 2006 2:33 PM To: Declude.JunkMail@declude.com; declude.virus@declude.com Subject: ANN: SPAMC32 (SpamAssassin SPAMC for Declude) 0.5.58 released ---------------------- SPAMC32 Release 0.5.58 1/10/2006 ***** Release notes for this version: [ + Added feature ] [ * Improved/changed feature ] [ - Bug fix ] [ ^ Cosmetic/naming change ] [+] Added support for negative values to '-lt' and '-ht' switches, which control client-side spam thresholds. This was necessary because Declude does not appear to properly detect negative return codes, although SPAMC32 can return them. A workaround is to use negative client thresholds, such as SPAMASSASSIN external nonzero "c:\imail\declude\spamc32.exe -lt (20) -ht 0 -f" <choose a weight> 0 This test definition will set SPAMC32 to return code 1 to Declude if the SPAMD result is between -20 and 0. NOTE: because of the way SPAMC32 parses the command line, it is necessary to express negative values in the 'spreadsheet' style that encloses them in parentheses and does not use the minus sign, i.e. (20) instead of -20 The negative value will NOT work as expected if you use the minus sign. --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
