Title: Message
Hi Scott:
 
a) I think the "LASTACTION' log entry is rendering the "Deleting Spam from/to" log entry obsolete. It contains the action, the from and to to - all information that is redundant with other log lines (see "red" sample below)
 
b) Once an email is "bypassing whitelisting" then all other "bypassing" tests are mood. The "mid" log might just as well not report the outcome of the other "bypassing" tests (or even skip over them).  See "green" sample below.
 
 
05/19/2004 16:45:20 Qc75a1ba000dc3fde AHBLSOURCES:7 RDNSBL:8 AHBLDOMAINS:5 nNOLEGITCONTENT:-3 HEUR9:3 .  Total weight = 20.
05/19/2004 16:45:20 Qc75a1ba000dc3fde Bypassing whitelisting of E-mail with weight >=19 (20) and at least 1 recipients (1).
05/19/2004 16:45:20 Qc75a1ba000dc3fde NOT bypassing whitelisting of E-mail with weight >=14 (20) and at least 4 recipients (1).
05/19/2004 16:45:20 Qc75a1ba000dc3fde NOT bypassing whitelisting of E-mail with weight >=12 (20) and at least 6 recipients (1).

05/19/2004 16:45:20 Qc75a1ba000dc3fde Deleting spam from [EMAIL PROTECTED] to [EMAIL PROTECTED]
05/19/2004 16:45:20 Qc75a1ba000dc3fde Subject: Spring Sale and Website Launched
05/19/2004 16:45:20 Qc75a1ba000dc3fde From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]  IP: 63.251.135.75 ID: 711523422A
05/19/2004 16:45:20 Qc75a1ba000dc3fde Tests failed [weight=20]: BYPASS19=IGNORE AHBL=WARN AHBLSOURCES=IGNORE RDNSBL=WARN AHBLDOMAINS=IGNORE IPNOTINMX=IGNORE HEUR9=IGNORE WEIGHTKILL=DELETE
05/19/2004 16:45:20 Qc75a1ba000dc3fde Last action = "">.
Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

http://www.HM-Software.com/
 

Reply via email to