Hi all
what tools do you curently use to find which test are taking the most time
and/or CPU ..
BR
Serge
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail. The archives can be
: [Declude.JunkMail] Test or filtering option for authenticated
messages
Any news about this David? I tried with the latest interim (4.3.64) with the
same result: any WHITELIST disables the CATCHALLMAILS test or any other test
and it's defined action.
Best,
Adolfo Justiniano
Santa Cruz BBS
e-mail
PROTECTED] On Behalf Of Matt
Sent: Sunday, October 28, 2007 12:33 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Test or filtering option for authenticated
messages
Check that you don't have PREWHITELIST ON turned on, or rather set it to
OFF. This will cause other tests to run
-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Monday, October 15, 2007 9:53 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
I thought we had added this I will check with our engineers
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
Any news about this David? I tried with the latest interim (4.3.64) with the
same result: any WHITELIST disables the CATCHALLMAILS test or any other test
and it's defined action.
Best,
Adolfo Justiniano
Santa Cruz
What order do the different test types trigger?
What I am trying to do is find emails that Fail both INV-URIBL and ZEROHOUR but
it seems that the ZEROHOUR is ran after the filters? Which makes the TESTFAILED
variable in this case useless. Is there a way to run zero hour before the
filters
: [Declude.JunkMail] Test or filtering option for authenticated
messages
Hello David,
Bad news, as soon as I enable the WHITELIST AUTH the COPYTO action is
ignored.
Best,
Adolfo Justiniano
Santa Cruz BBS
e-mail: [EMAIL PROTECTED]
http://www.scbbs.net
-Original Message-
From: Adolfo Justiniano
Question: Is there any Declude JunkMail test or a filtering option to use in
case the sender was authenticated? I couldn't find it in the manual or the
release notes. If not, could someone at Declude please add it to the
wishlist.
I'd like to use it either one to counterbalance some weight
or more recipients and a weight of 60 or higher.
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adolfo
Justiniano
Sent: Friday, October 12, 2007 2:24 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test or filtering option
@declude.com
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
As an FYI this test can be useful if you are concerned that not all users
should be whitelisted when authenticated.
BYPASSWHITELIST
This optional test instructs Declude to bypass any whitelisting for E
: [Declude.JunkMail] Test or filtering option for authenticated
messages
Thank you David for the suggestion, but it doesn't work in my case.
I'll explain what I'm doing: instead of using IMail's copyall function for
archival, which BTW is very resource intensive, I use Declude's COPYTO
action using a filter
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Friday, October 12, 2007 3:10 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
Have you tried using
CATCHALLMAILS
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adolfo
Justiniano
Sent: Friday, October 12, 2007 3:46 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
I think that it wouldn't work.
First
I'll explain what I'm doing: instead of using IMail's copyall function for
archival, which BTW is very resource intensive, I use Declude's COPYTO
Please explain. The Imail copyall function simply adds the copyall
configured email address to the envelope of the email as it is received. As
such,
Of David
Barker
Sent: Friday, October 12, 2007 4:04 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
To archive certain addresses you would use per-domain/per-user setting where
the .junkmail file or .sender file action
Hello John,
Please explain. The Imail copyall function simply adds the copyall
configured email address to the envelope of the email as it is received.
Well this was long time a ago when I tried to use IMail's copyall function,
probably around IMail's version 7.x or 8.x, the first thing that I
:27 PM
To: 'declude.junkmail@declude.com'
Subject: RE: [Declude.JunkMail] Test or filtering option for authenticated
messages
Hmmm nice tip David, I'm going to try it and I'll let you know if it works.
I'm using actually version 4.3.46
Best,
Adolfo Justiniano
Santa Cruz BBS
e-mail: [EMAIL
Test, please ignore.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Sorry for the multiple tests, please ignore.
Rob
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
test - ignore
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Test
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Idea! (Ouch)
If email failed HELOBOGUS or NOREVDNS (or other specified tests) END
otherwise compare the last 3 characters of the HELO with the last 3
characters of the REVDNS and if not match add say 1/5 or so of HOLD weight.
Thoughts, comments, boos, yahs, Go back to sleep (Can I Please?)
John
If email failed HELOBOGUS or NOREVDNS (or other specified
tests) END otherwise compare the last 3 characters of the
HELO with the last 3 characters of the REVDNS and if not
match add say 1/5 or so of HOLD weight.
Hmm John, I consider it a good idea. As I can remember I suggested it
arround
Subject: RE: [Declude.JunkMail] Test idea
If email failed HELOBOGUS or NOREVDNS (or other specified
tests) END otherwise compare the last 3 characters of the
HELO with the last 3 characters of the REVDNS and if not
match add say 1/5 or so of HOLD weight.
Hmm John, I consider it a good idea
/ .info mismatches for example
- Original Message -
From: John T (Lists) [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Monday, September 04, 2006 1:29 AM
Subject: [Declude.JunkMail] Test idea
Idea! (Ouch)
If email failed HELOBOGUS or NOREVDNS (or other specified tests) END
Subject: Re: [Declude.JunkMail] Test idea
I ran a query on this looking at my August email results
(228889 emails):
Excluding HELOBOGUS
Excluding (timeout) and [No Reverse DNS] and (Private IP)
Looking at last 4 chars of helo last 4 chars of revdns
1487 ham:
including gov / us
Of Scott
Fisher
Sent: Monday, September 04, 2006 8:15 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Test idea
I ran a query on this looking at my August email results (228889 emails):
Excluding HELOBOGUS
Excluding (timeout) and [No Reverse DNS] and (Private IP
ping
John T
eServices For You
Seek, and ye shall find!
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Pong
Sure is quite.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Saturday, August 05, 2006 4:38 PM
To: declude.junkmail@declude.com
Subject: [Spam Test] [Declude.JunkMail] Test
ping
John T
eServices For You
Seek
Checking to see if I can post...
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
as the whitelisting.
-Erik
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc
Catuogno
Sent: Wednesday, June 14, 2006 3:28 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test - can I post?
Checking to see if I can post...
---
This E-mail
: [Declude.JunkMail] Test - can I post?
If you have ever whitelisted the REVDNS of: .declude.com (like it has
been in the past - for several years); you will need to change this. We had
too. Before, Declude always had the correct REVDNS based on their domain
but since their move to a new
: [Declude.JunkMail] Test - can I post?
Importance: High
Checking to see if I can post...
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail. The archives can be found at
http://www.mail-archive.com
: Wednesday, June 14, 2006 7:16 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test - can I post?
Erik,
We have just migrated our servers, and the DNS is in the
process of being updated.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED
And the .xiolink.com full text lookup returns a dotted/dashed IP
address used by most dialup/residential customers and for most of us...
That's not really true. A dotted-dashed IP-like hostname is a common
placeholder used by ISPs for IPs whose customers have not requested a PTR, even
You would think that a company that is SPAM control and offer a
product
for SPAM control would look more into who they use for their ISP
and how
they setup their service.
Just for the record, I was the one that chose EasyDNS. And at that
time, I certainly had no knowledge of them making
Well hell Scott!
Hope all is going well for you:)
Sharyn
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Yes, it is a common place holder... But for how long? Shouldn't a
company be on top of that based on the type business they are in? Lookup
those IP ranges to see if they those ranges are listed on any list; use DNS
that is also not listed on any URI lookup? Normally, what... 7 to 10 days
Another Test to See
that the List is working properly.
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
y
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun Patterson
Sent: Tuesday, June 13, 2006 1:50
PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test
Another Test to See that the List is working properly.
---This E-mail came
Have we been having problems with this?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun Patterson
Sent: Tuesday, June 13, 2006 1:50
PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test
Another Test to See that the List is working
.
Original Message
From: Arik Keller [EMAIL PROTECTED]
Sent: Tuesday, June 13, 2006 2:02 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test
Have we been having problems with this?
_
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED
] On Behalf Of Gary
Steiner
Sent: Tuesday, June 13, 2006 12:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test
No. Most likely it is because declude.junkmail typically experiences a
lot of traffic, but
recently it's been extremely quiet. I guess some folks just got
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, June 13, 2006 12:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test
No. Most likely it is because declude.junkmail typically experiences a
lot of traffic, but recently it's been extremely
This is a Test
Message to ensure the lists are working properly.
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
yep
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun Patterson
Sent: Monday, June 12, 2006 12:08
PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test Message
This is a Test Message to ensure the lists are working
properly
Is there any way, and if not is some one willing to come up with a way, of
counting the number of characters in the body and if less than say 10 the
penalize x and if less than say 25 then penalize y?
John T
eServices For You
---
[This E-mail was scanned for viruses by Declude EVA
You are correct Sandy, it doesn't, but it can cause a surge in
processes running. My way of thinking, why run the test if you don't
need to?
Absolutely. That's why -sw exists. Hey, maybe it'll be thread-based,
rather than process-based, someday -- that'd be so non-Unix-y, though.
Is it a fact that declude processes in the order the results apear in the
logs, from left to right?
Thanks,
Travis
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can
Is it a fact that declude processes in the order the results apear in the
logs, from left to right?
external tests, ip4, dns, declude app tests, then custom filters
Then, this means the external test of spamc32/spamassassin with the
skipifweight option is used is meaningless since it is
I think the order is:
ip4r rhsbl
declude internal
spamdomains
external
ipfile/fromfile
filters
- Original Message -
From: Travis Sullivan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, October 24, 2005 9:57 PM
Subject: Re: [Declude.JunkMail] test order
Is it a fact
] test order
I think the order is:
ip4r rhsbl
declude internal
spamdomains
external
ipfile/fromfile
filters
- Original Message -
From: Travis Sullivan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, October 24, 2005 9:57 PM
Subject: Re: [Declude.JunkMail] test order
Message -
From: Sanford Whiteman [EMAIL PROTECTED]
To: Travis Sullivan Declude.JunkMail@declude.com
Sent: Monday, October 24, 2005 10:43 PM
Subject: Re[2]: [Declude.JunkMail] test order
Then, this means the external test of spamc32/spamassassin with the
skipifweight option is used
Since external tests create the most load on the system, it would be
nice to run them last and only if skipifweight hasn't been met.
SPAMC32 hitting a remote SPAMD doesn't (shouldn't) create more load
than full-text searches on the local box.
--Sandy
This is the last message I received.
Something going on?
- Original Message -
From: Matt [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, June 29, 2005 5:57 PM
Subject: Re: [Declude.JunkMail] OT: Free Microsoft telephone support code
It's been taken.
Matt
No, its just been unusually quiet or we both have problems :)
Darrell
--
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Try it
today - http://www.invariantsystems.com
Robert writes:
This is the last message I received.
thanks for the reply.
Robert
- Original Message -
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Saturday, July 02, 2005 9:40 AM
Subject: Re: [Declude.JunkMail] test
No, its just been unusually quiet or we both have problems :)
Darrell
Sent: Saturday, July 02, 2005 10:23 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] test
thanks for the reply.
Robert
- Original Message -
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Saturday, July 02, 2005 9:40
It seems to just be very quiet. Happy 4th to everyone
Barry
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert
Sent: Saturday, July 02, 2005 8:20 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] test
This is the last message I
SF Flip your log into debug mode for a couple of emails. You'll see exactly
SF what order everything runs.
Great idea. I'll let you know what we find.
--
Best regards,
Davidmailto:[EMAIL PROTECTED]
---
This E-mail came from the Declude.JunkMail mailing list. To
I know this has been discussed at times before but am not sure of the
status since the more recent releases. I'm looking at running invURIBL
but I would like to run it AFTER Sniffer and ONLY if Sniffer didn't
return a hit. Is this possible?
Also, I have an external test that I want to use to
, 2005 10:31 AM
Subject: [Declude.JunkMail] Test Order
I know this has been discussed at times before but am not sure of the
status since the more recent releases. I'm looking at running invURIBL
but I would like to run it AFTER Sniffer and ONLY if Sniffer didn't
return a hit. Is this possible
Hello Darrell,
Tuesday, May 17, 2005, 10:56:46 AM, you wrote:
Dsic David,
Dsic There is no way native to Declude to prevent an external test from running
Dsic based on the results of another external test. The only thing I can think
Dsic of is set invURIBL's SKIPWEIGHT value to the weight that
. Download a copy today - http://www.invariantsystems.com
- Original Message -
From: David Sullivan [EMAIL PROTECTED]
To: Darrell ([EMAIL PROTECTED]) Declude.JunkMail@declude.com
Sent: Tuesday, May 17, 2005 11:04 AM
Subject: Re[2]: [Declude.JunkMail] Test Order
Hello Darrell,
Tuesday
Dsic understanding is that external tests are ran in the order they are listed
in
Dsic the global.cfg.
That would be very convenient. Can someone from Declude confirm this?
--
Best regards,
Davidmailto:[EMAIL PROTECTED]
---
This E-mail came from the
with the default
configuration. Download a copy today - http://www.invariantsystems.com
- Original Message -
From: David Sullivan [EMAIL PROTECTED]
To: Darrell ([EMAIL PROTECTED]) Declude.JunkMail@declude.com
Sent: Tuesday, May 17, 2005 11:41 AM
Subject: Re[4]: [Declude.JunkMail] Test
Dsic I found an answer in the archives from Scott. External tests are ran in
the
Dsic order they are listed in the global.cfg.
Dsic http://www.mail-archive.com/declude.junkmail@declude.com/msg06191.html
Thanks. This does help. That thread is about 2.5 years old now, can
someone from Declude
]: [Declude.JunkMail] Test Order
Dsic I found an answer in the archives from Scott. External tests are
ran in the
Dsic order they are listed in the global.cfg.
Dsic
http://www.mail-archive.com/declude.junkmail@declude.com/msg06191.html
Thanks. This does help. That thread is about 2.5 years old now, can
] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Wednesday, May 18, 2005 5:39 AM
To: Declude.JunkMail@declude.com
Subject: Re: Re[6]: [Declude.JunkMail] Test Order
Flip your log into debug mode for a couple of emails. You'll see
exactly
what order everything runs
Can someone please test an email reader program for
me.
It allows faster checking for false positives and
the ability to resend and delete.
Thanks
Terence Blyth
Is there anyway you can scan the email to
see
if it contains a attachment of say .lnk, and the
email going to a user and a patictuler
domain
and then bounce or delete that email?
Since Declude antivirus can't be configured for
defferent domains, I was wondering maybe
it
can be possible
Just testing to see if my posts make it to the list. No need to reply.
--
Kim W. Premuda
FastWave Internet Services
San Diego, CA
--
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came
I am testing sniffer right now and wonder if I need to run all the other
tests along side it.
I am trying to reduce my daily workload of analyzing the spamtrap and hope
that sniffer and surbl will do this.
Do I even need surbl?
Any advice in this matter would be greatly appreciated.
Thanks in
I am testing sniffer right now and wonder if I need to run
all the other tests along side it.
I am trying to reduce my daily workload of analyzing the
spamtrap and hope that sniffer and surbl will do this.
Do I even need surbl?
Do you have so much workload on your mailserver that you
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Wednesday, September 08, 2004 11:22 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Test needed along with sniffer
I am testing sniffer right now and wonder if I need to run
all the other tests along side
Sniffer is very good. It detected 47600 out of 49250 spam messages for me through Sept
1-5.
The SURBL filter contains a lot of body filters and can be CPU intensive.
Scott Fisher
Director of IT
Farm Progress Companies
[EMAIL PROTECTED] 09/08/04 10:13AM
I am testing sniffer right now and
On Wednesday, September 8, 2004, 11:13:18 AM, Harry wrote:
HV I am testing sniffer right now and wonder if I need to run all the other
HV tests along side it.
Well, you can probably get by without the other tests, but since
you have Declude it would be MUCH better if you keep the other tests
in
:[EMAIL PROTECTED]] On Behalf Of Markus Gufler
Sent: Wednesday, September 08, 2004 11:22 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Test needed along with sniffer
I am testing sniffer right now and wonder if I need to run
all the other tests along side it.
I am trying
Harry,
We have a utility to let you know how well a specific test does in our log
parser (DLAnalyzer). The test is called the Test Breakdown Summary
Report. Essentially you can pick a certain test(s) and see which other
tests fail along with them. This report has helped us eliminate tests
developers
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of MattSent: Wednesday, September 08, 2004 3:56
PMTo: [EMAIL PROTECTED]Subject: Re:
[Declude.JunkMail] Test needed along with
snifferHarry,Sniffer is a great addition to any
Thank you very much.
I will absorb this and share what I learn
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: Wednesday, September 08, 2004 2:00 PM
To: Harry Vanderzand
Cc: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail
Thank you, I will try the report out.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of support
Sent: Wednesday, September 08, 2004 4:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test needed along with sniffer
Harry,
We have
, September 08, 2004 3:56 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test needed along with sniffer
Harry,
Sniffer is a great addition to any Declude setup, however your issues are
not due to just simply the size of your processors. We run a dual 1 GHz
PIII system with RAID 5
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Wednesday, September 08, 2004 3:56 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test needed along with
sniffer
Harry,
Sniffer is a great addition to any Declude setup, however your
Why did this not ROUTETO
07/09/2004 00:15:58 Q462a09e900349a60 Triggered CONTAINS filter SAVFILTER on
X-Bulk: 99 [weight-0; X-Bulk: 99
07/09/2004 00:16:00 Q462a09e900349a60 Triggered IS filter REVDNSFILTER on
localhost [weight-14; localhost].
07/09/2004 00:16:00 Q462a09e900349a60 AHBLDOMAINS:8
Why did this not ROUTETO
...
The test trigered the Contains for the SAVFILTER but SAVFILTER does not show
up in the Tests Failed Section
Well, there is a very clear answer to your question -- Declude JunkMail did
not use the ROUTETO action for the SAVFILTER test because the E-mail did
not fail
, 2004 4:11 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test Action Failure
Why did this not ROUTETO
...
The test trigered the Contains for the SAVFILTER but SAVFILTER
does not show
up in the Tests Failed Section
Well, there is a very clear answer to your question -- Declude
OK why then the
07/09/2004 00:15:58 Q462a09e900349a60 Triggered CONTAINS filter SAVFILTER on
X-Bulk: 99 [weight-0; X-Bulk: 99
Because a line in the filter matched. But:
here are the contents of the sav-smtp.txt that did not work, why?
HEADERS END CONTAINS X-Bulk: 99
HEADERS END CONTAINS
-Scott
Can you clarify the END for me?
Would this fail the test if the e-mail came with a revdns of us.info?
revdns 10 contains info
revdns end contains info
mailfrom 10 contains info
Scott Fisher
Director of IT
Farm Progress Companies
[EMAIL PROTECTED] 07/09/04 11:44AM
OK why then
Can you clarify the END for me?
It ends the processing of the filter.
Would this fail the test if the e-mail came with a revdns of us.info?
revdns 10 contains info
revdns end contains info
mailfrom 10 contains info
In this case, the E-mail would fail the test (the first line fails the
test; the
: Friday, July 09, 2004 10:06 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Test Action Failure
Can you clarify the END for me?
It ends the processing of the filter.
Would this fail the test if the e-mail came with a revdns of us.info?
revdns 10 contains info
revdns end
by failing the test on
a match and not continuing to process the whole body filter file.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Friday, July 09, 2004 10:06 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declud
OK
that makes sence. I will try it. thanks Matt
Kevin
Bilbee
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of
MattSent: Friday, July 09, 2004 11:33 AMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Test
Action FailureKevin,Think
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test Action Failure
Kevin,
Think about using MAXWEIGHT 10 in the beginning of the file. This will
end the test immediately when a score of 10 is reached. This can be an
effective incremental method of saving processing power. It can also
: [Declude.JunkMail] Test Action Failure
Kevin,
Think about using MAXWEIGHT 10 in the beginning of the file. This will
end the test immediately when a score of 10 is reached. This can be an
effective incremental method of saving processing power. It can also be
redefined so you can have groupings
: [Declude.JunkMail] Test Action Failure
Kevin,
You can accomodate for that by giving it a negative weight in your
Global.cfg. The total weight is a combination of the two and the
Global.cfg score won't be assessed without a positive hit on a filter
line (END statements don't count).
Matt
Kevin
in the filter file???
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Matt
Sent: Friday, July 09, 2004 11:58 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test Action Failure
Kevin,
You can accomodate for that by giving
PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matt
Sent: Friday, July 09, 2004 11:58 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Test Action Failure
Kevin,
You can accomodate for that by giving it a negative weight in your
Global.cfg. The total weight is a combination
I have been going through my Declude logs and I see where it
tells me what tests have failed and the weight that was assigned to that particular
message. What is this nALLOW and where does it come from?
Here is the test failed line from my log:
SBL-XBL:70 DSBL:60 SPAMCOP:60
Do you have a test called ALLOW that uses a not failed weight (a value in the last
column)?
If so, these will get a small n prepended to the test name in the logs.
For example an e-mail that does not fail.
NOLEGITCONTENT nolegitcontent x x 0 -20
will show up in the
1 - 100 of 239 matches
Mail list logo
