Chipping in my two cents, I'd say you've received excellent advice for tuning Declude so far.
As a busy sysadmin myself, I'll add some less specific "advice from the field". Hopefully others will see fit to add their observations. Go with the weighted system. You're busy, but resist the urge to go for "need a bigger hammer" solutions. The worst thing you can do is create a filter or ramp up the weight for a specific blacklist, or make a DELETE action on a single test. Living with some spam is better than spending all of your time fighting it and fishing false positives out of your spam folder. Start with Declude 2.x, the organization of the log file makes it far more readable than previous versions. Your users will call you about missing mail (false positives). Get specific information from them about who sent it to whom and when. Write down your procedure for finding these missing emails and how to re-queue them. grep is your friend. Use "find.exe" if you're more comfortable, but if you have large logs or a slow computer, you'll love using grep instead. Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joey Proulx Sent: Friday, March 04, 2005 5:14 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Beginner configuration? Hello, Just downloaded the demo version of Junkmail Pro, and I was curious about the basic setup. For the last two days I've monitored and tweaked and held and redirected and spent hours upon hours looking over the junkmail setup and rules and whatnot. I'm wondering if I'm reinventing the wheel. I work for a school district with a big spam problem, but as any of you in gov't know, if I tell them we should buy something I need to make sure it works. I was just wondering if there are any tried and true setups that any of you are using to cut down on the spam. I'm seeing that this system works, but I'm also still running the built-in Imail filter, and I've seen quite a few messages that get caught by Imail, but have a Declude score of 0, that should NOT have made it through. Do you all still run the builtin Imail spam as well? Any filters I should definitely setup? I'm seeing a lot of CMDSPACE and SPAMHEADERS (missing MessageID header) from some local clients (I don't control all my clients, so I don't think I can make them authenticate). Should I do away with these tests, or can I fix these two issues on the server side? Thanks for all your help. _____________________________ Joey Proulx SAU #21 Technology Support Staff 2 Alumni Drive Hampton, NH 03842 (603) 926-8992, ext 115 [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
