Re: [Declude.JunkMail] Actions At Different Weights

2003-07-03 Thread Dan Geiser
Thanks, Scott!  I just implemented it.  Let's see if it works!

P.S. I have no doubt that it wll. :-)

P.S.S.  Have a Great Weekend Everybody!

- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 03, 2003 4:16 PM
Subject: Re: [Declude.JunkMail] Actions At Different Weights


>
> >Is this simply a matter of creating these weights in GLOBAL.CFG...
> >
> >WEIGHT13 weight  x x 13 0
> >WEIGHT55 weight  x x 55 0
> >WEIGHT60 weight  x x 60 0
> >
> >and then the following entries in $default$.junkmail...
> >
> >WEIGHT13  HOLD
> >WEIGHT55  ROUTETO
> >WEIGHT60  DELETE
> >
> >would this achieve my desired result?
>
> Unfortunately, this won't work -- an E-mail with a weight of 55 would fail
> the WEIGHT13 and WEIGHT55 tests, so both the HOLD and ROUTETO actions
would
> be used.  However, this results in a conflict (an E-mail can't be held and
> delivered), and the HOLD action takes priority.
>
> What you can do in this case is use (in the global.cfg file):
>
> WEIGHT13 weightrange  x x 13 54
> WEIGHT55 weightrange  x x 55 59
> WEIGHT60 weight  x x 60 0
>
> and then you could use what you had before in the $default$.JunkMail file:
>
> WEIGHT13  HOLD
> WEIGHT55  ROUTETO
> WEIGHT60  DELETE
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you have been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> This E-mail is scanned and free from viruses. www.nexustechgroup.com
>
>


This E-mail is scanned and free from viruses. www.nexustechgroup.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Actions At Different Weights

2003-07-03 Thread R. Scott Perry

Is this simply a matter of creating these weights in GLOBAL.CFG...

WEIGHT13 weight  x x 13 0
WEIGHT55 weight  x x 55 0
WEIGHT60 weight  x x 60 0
and then the following entries in $default$.junkmail...

WEIGHT13  HOLD
WEIGHT55  ROUTETO
WEIGHT60  DELETE
would this achieve my desired result?
Unfortunately, this won't work -- an E-mail with a weight of 55 would fail 
the WEIGHT13 and WEIGHT55 tests, so both the HOLD and ROUTETO actions would 
be used.  However, this results in a conflict (an E-mail can't be held and 
delivered), and the HOLD action takes priority.

What you can do in this case is use (in the global.cfg file):

WEIGHT13 weightrange  x x 13 54
WEIGHT55 weightrange  x x 55 59
WEIGHT60 weight  x x 60 0
and then you could use what you had before in the $default$.JunkMail file:

WEIGHT13  HOLD
WEIGHT55  ROUTETO
WEIGHT60  DELETE
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Actions At Different Weights

2003-07-03 Thread Dan Geiser
Hello, All,
I've pretty much reached the point where DJM Pro is holding too much e-mail
each day for me to check it for false positives.  I need to bring the size
of my "hold" queue down.  To do this I want to implement the "delete" action
on some of the higher weight stuff.  In addition to whatever "weight" i
decide to use for "delete" I would also like to have weight in between my
"hold" weight and my "delete" weight, call it my "route to" weight where I
route mail to myself for closer inspection.  This "routeto" weight will
mainly be a another weight that helps me to push the "delete" weight even
lower.

Say for example my "hold" weight is 9 and my "delete" weight is 60.  Well my
"routeto" weight might be 55 and I want to be able to "routeto" myself the
stuff between 55 and 59 for closer inspection and if after a specified
length of time I see that 55 hasn't caught any legit mail then I'll lower
the "delete" weight to 55 and my "routeto" weight to 50 and then start
investigating the new "routeto" weight as my possible "delete" weigh.  I'm
doing this in the interest of getting my "delete" weight as low as possible
but still leaving room for error.

Anyway, it might be convuluted but that's how I'd like to do it.  Now my
biggest issue is coming up with the right way to set $default$.junkmail.

Is this simply a matter of creating these weights in GLOBAL.CFG...

WEIGHT13 weight  x x 13 0
WEIGHT55 weight  x x 55 0
WEIGHT60 weight  x x 60 0

and then the following entries in $default$.junkmail...

WEIGHT13  HOLD
WEIGHT55  ROUTETO
WEIGHT60  DELETE

would this achieve my desired result?

Basically I want the actions to be processed in the order DELETE then
ROUTETO then HOLD.  Will that do the trick?  I'd be interested in knowing.

Also, if anyone has a better idea for handling "caught spam" besides what
I've outlined here I'd be interested in reading about that as well.

Thanks, Much!
Dan Geiser <[EMAIL PROTECTED]>


This E-mail is scanned and free from viruses. www.nexustechgroup.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.