Re: [Declude.JunkMail] console question (yet again)
>Logic dictates that since there are more tests for a message to fail that >there should be a higher percentage of messages showing up as SPAM now >than there was before. I can only come up with 2 theories. > >Theory1 - Some spammers now realize their SPAM is not getting through and >have since stopped sending to our mailserver. I consider this HIGHLY >unlikely since we don't send out bounces, just delete messages (and also >since I doubt this would alter spammer behavior anyway.) Do you have a "nobody" alias set up to access all misaddressed mail? If so, it could be that spammers were sending mail to those addresses, but aren't anymore. They can send thousands of such E-mails, which can really skew the percentage of spam. >Theory2 - Do messages that fail any test associated with the DELETE action >not appear in the console? I doubt this is the case either, but it would >help to explain the drastic drop in the percentage of mail that the >console is listing as SPAM. No, that wouldn't cause a change. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] console question (yet again)
In the last two days I have added several ip4r tests to my global.cfg and def.jm files, added 2 fromfile blacklist tests, and bumped up the weight of a few tests that were already there. This seems to have significantly cut down on the amount of spam getting through without catching much more legit mail. So I'm happy, but I have noticed something a bit strange. The percentage of mail that is showing up in the console as SPAM has fallen to the 55-60% range, whereas before I made the recent changes it usually hovered around 75-80%. Logic dictates that since there are more tests for a message to fail that there should be a higher percentage of messages showing up as SPAM now than there was before. I can only come up with 2 theories. Theory1 - Some spammers now realize their SPAM is not getting through and have since stopped sending to our mailserver. I consider this HIGHLY unlikely since we don't send out bounces, just delete messages (and also since I doubt this would alter spammer behavior anyway.) Theory2 - Do messages that fail any test associated with the DELETE action not appear in the console? I doubt this is the case either, but it would help to explain the drastic drop in the percentage of mail that the console is listing as SPAM. Anyone have any ideas/theories? Thanks Bart Lackorn STIC.NET --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country-based DNSRBLs
The way that I've done it is as such: CHINAip4rcn.rbl.cluecentral.net 127.0.0.2 5 0 in your global.cfg. Then, use the CHINA test as you would any other test. Do this for each country you wish to block. Koree Larry French wrote: > I would love to block almost all foreign countries. How can this be > done from this list? > > Larry French > Marion Computer Center, Inc. > 740.382.2881 > > > -Original Message- > From: Koree A. Smith [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, August 14, 2002 5:29 PM > To: declude.junkmail > Subject: [Declude.JunkMail] Country-based DNSRBLs > > > Has anyone seen these before? Have any of you used any of them? > > http://www.cluecentral.net/rbl/ > > I hate to block entire countries from sending Spam, but there are a few > that have 1) Huge numbers of open relays, 2) Spam companies that send > out stuff for people all over the world. > > Thanks, > > Koree > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] DSN:Variables, Lists and Testing
>Would it be possible to add a feature that would create a separate temp >debug log while maintaining the default log file. It's been added to the suggestion database. I'm sure that could be very useful. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DSN:Variables, Lists and Testing
Scott, Would it be possible to add a feature that would create a separate temp debug log while maintaining the default log file. Something likeLOGLEVELMID copy loglevel filename Where if copy (or some key name) follows the primary settings a test logfile would be created using the loglevel set for that setting. Or simply a second loglevel line like LOGLEVELTEST loglevelfilename The JM logfiles (mine at least) can be quite large, a couple of hundred meg or more and growing. When looking for a possible problem, testing a new feature, filter file or whatever rather than searching a large log file or renaming/copying/whatever the current log file several times to get snippets during this testing then keeping track of these separate files to maintain a good logfile. Being able to get a separate test log file would help a lot. my $.02 Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
