RE: [Declude.JunkMail] More 1.77i15 Log Issues
So one should think of the line labeled "Tests failed:" as a line that really contains "Actions taken:" It can be thought of as either. Actions are only taken when a test fails, and that line lists all the tests that failed, so it can be thought of in either way. The weight line also includes tests that do *not* fail, when they alter the weight (the test names beginning with "n", such as "nIPNOTINMX"). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] More 1.77i15 Log Issues
Hi Scott: Okay - that's fair enough. So one should think of the line labeled "Tests failed:" as a line that really contains "Actions taken:" Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] More 1.77i15 Log Issues
Should the "Tests Failed" summary line be "complete", e.g., should it
replace every single "Failed" line that appears in the HIGH log mode? This
way, log analyzers can simply parse the Tests Failed summary and learn about
every test AND every action?
Correct.
If so, I believe there may be one issue. My Tests Failed line don't seem to
itemize ANY negative test results, not even word filters. Could it be, that
your Tests Failed is using the HIDETESTS definitions to suppress
information?
The one that shows the negative weights (the one that ends with "Total
weight = ") appears at LOGLEVEL MID and higher, and is separate from the
new one (that starts with "Tests failed"). The new one replaces the
LOGLEVEL LOW log file entries, and therefore will only record the tests
that would have generated a log file entry. This is appropriate as the
negative weights affect the total weight of the E-mail ("Total weight ="
line), but do not affect the actions that are taken ("Tests failed" line).
Note that the HIDETESTS option does not affect what is shown in either line.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] More 1.77i15 Log Issues
Hi Scott: Should the "Tests Failed" summary line be "complete", e.g., should it replace every single "Failed" line that appears in the HIGH log mode? This way, log analyzers can simply parse the Tests Failed summary and learn about every test AND every action? If so, I believe there may be one issue. My Tests Failed line don't seem to itemize ANY negative test results, not even word filters. Could it be, that your Tests Failed is using the HIDETESTS definitions to suppress information? I believe that the LOG FILE should NOT process the HIDETESTS and should be complete. HIDETESTS should only be applied against information that is shown "publicly" (e.g., in headers, in bounce/warn messages, and the like). Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
