RE: [Declude.JunkMail] Results with our configuration

[David Lewis-Waller]

Title: Message

You could use domlist http://www.declude.com/tools/index.html. This will analyse your SMTP log file generate by Imail as opposed to those generated by Declude.   David WiSS Limited -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kris McElroy Sent: 24 January 2003 15:39 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Results with our configuration My log level is set to low and yesterday I ran 130 MB?  This brings me to ask a question How can I see the total number of Emails that Declude processed for that day?  This way I can analyze or get an idea of how much traffic this machine is seeing?     Thanks,     Kris McElroy [EMAIL PROTECTED]   Internet Systems Engineer Duracom, INC. www.duracom.net   “I'm retired 99.9%. Of course, there always is that .1%.” --Michael Jordan, February 18, 1999 ----- Original Message ----- From: Craig Gittens To: [EMAIL PROTECTED] Sent: Friday, January 24, 2003 6:18 AM Subject: RE: [Declude.JunkMail] Results with our configuration LOL My log level is MID and I run at >100MB a day.   Craig. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Tolmachoff Sent: Thursday, January 23, 2003 6:39 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Results with our configuration Currently, our log level is set to HIGH and run about 4.5 mg on weekdays.   Once I have added one more set of files, Kami’s, and watch that for about a week, then I may go back down to MID. I will always be at MID or above.   John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA  92835 www.reliancesoft.com   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell L. Sent: Thursday, January 23, 2003 2:00 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Results with our configuration   John,   From your post I gathered that your log level is atleast “mid”.  Is this a normal configuration or just a one time deal to look at the mail.   Darrell     Darrell LaRock Information Systems Analyst Gannett Television 716-849-2272 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff Sent: Thursday, January 23, 2003 1:22 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Results with our configuration   I wanted to post yesterdays results of Declude Junkmail:   We hold on a weight of 20 and delete at 40. Messages held are reviewed using Spam Review software.   There were no False Positives in the messages deleted. This was reviewed by manually going through the Declude Junkmail log for all messages deleted and looking at the subject line and sender and recipient.   3485 messages were processed by Declude Junkmail.   889 were deleted. 85 were held. Of the held, 16 were False Positives.   Total found and deleted: 958 (27.49%)   Individual tests like SPAMCHECK and NOXMAIL generate a number of false positives, but that is what the while filters and MATCH program is for. However, those tests are also responsible for the majority of the messages deleted.   Tests used: (numbers after action is weight we use)   ORDB                      WARN  2 OSDUL                    WARN  2 OSFORM                  WARN  2 OSLIST                   WARN  2 OSPROXY                WARN  2 OSRELAY                 WARN  2 OSSMART                WARN  2 OSSOFT                  WARN  2 OSSRC                    WARN  10 SPAMCOP                WARN  12 DSN                        WARN  10 NOABUSE                WARN  3 NOPOSTMASTER       WARN  3 BADHEADERS            WARN  5 BASE64                   WARN  12 HELOBOGUS             WARN  3 IPNOTINMX              LOG    0        -3 MAILFROM               WARN  15 PERCENT                 WARN  15 REVDNS                  WARN  2 ROUTING                 WARN  10 SPAMHEADERS         WARN  5   ADULT1                   WARN  50 JUNK                       WARN  30 SPAMCHECK             WARN  Weight NOXSPAM1               WARN  20 NOXSPAM2               WARN  15 NOXSPAM3               WARN  15 NOXADULT1             WARN  20 NOXADULT2             WARN  15 NOXADULT3             WARN  15 REVIEWER1              ROUTETO       [EMAIL PROTECTED] WHITEFILTER1         WARN WHITEFILTER2         WARN WHITEFILTER3         WARN WHITEFILTER4         WARN GRAYFILTER1            WARN GRAYFILTER2            WARN GRAYFILTER3            WARN GRAYFILTER4            WARN MATCH                   WARN  -40   Kami, I have not yet had time to try your lists.   John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA  92835 www.reliancesoft.com