Re: [Declude.JunkMail] 100 Point scale / DNS

[Dan Geiser]

David, I migrated our Declude JunkMail setup to a 100 point system awhile back.  With our current setup as it is today we HOLD on 100 and DELETE on 300.  When I first migrated over the way that I did it was I set my HOLD weight to 100 and had no DELETE weight and then I assigned arbitrary (with reason) to different tests.  Since I didn't have a DELETE weight at all at first I didn't worry about any messages being deleted and since I was closely monitoring things during this transition anything that was accidentally held I would just release.  Before releasing I would adjust my original arbitrary scoring down to make sure that the next time that message, given the tests that it had failed, that it wouldn't be caught again.   Most tests I just started out at 100 points each and very quickly in a few days adjusted them down to something more reasonable, usually in the 25 point range.  I came up with that I think is a good combination of getting messages to squeak in under the 100 HOLD weight (few false positives) and yet leaving the scores high enough to catch a lot of spam.  Whenever I add a new test now I add it as a 100 point test and then I adjust my DELETE weight up 100 points so that way I am assured that the addition of the new test will not put anything over the delete level.  And then I watch for false positives and adjust the new test down accordingly to again get those messages to squeak in under the HOLD weight.   I am investigating making my DJM settings publically available via FTP as Kami does. If you are interested I'll let you see how I am doing it when that's up.   Dan   ----- Original Message ----- From: Kornitz, David To: [EMAIL PROTECTED] Sent: Tuesday, September 28, 2004 8:36 AM Subject: [Declude.JunkMail] 100 Point scale / DNS First Question:   I know this issue has been discussed in the past, but I would like to make sure I understand the discussions:   1.                   We are contemplating revising the scoring to a 100 point scale 2.                   I assume that when the conversion is made that initially you select the value for 100 point and then proportionally adjust the scores up.   Questions:  What weight did you use for the 100 points? Was it the delete weight? Or the hold weight?  or something in between the values?       Second Question:               I am receiving a lot of DNS timeout values, yet when I go the run the IP address through NSLookup, it returns the address immediately.  The primary address on the server is a Windows 2003 DNS server, secondary addresses are linux DNS servers.   What DNS servers is Declude using when doing a DNS lookup?  As I recall, there was a way to specify these values in the global.cfg but I was not able to locate any information on this.   Anyone have any recommendations or insight into the problem?   Thanks for you help in advance,   David