Scott,
This was the result of a need that I expressed to them. You of course
need both Declude and the external test to support bitmasking before it
can be used, and not just one or the other.
This essentially allows us to construct a single executable that can
test for different items and return a single exit code representing
multiple test triggers. For instance, a single external test could
generate a result indicating the size of an E-mail and the number of
recipients, or you could test for a fair number of completely
unassociated items. This will help us determine what part of the
external test failed when there are multiple result codes instead of
just lumping multiple failures together under one test name. I have
also discussed this with Pete (hope he doesn't mind me mentioning this),
and this has the potential of allowing us to score multiple hits on
different result codes (most spam averages 2 to 3 hits in Sniffer).
Sniffer however was not designed with this in mind and the current
implementation of result codes where techniques are heavily mixed in
certain groups does not make this an optimal way to approach it, but it
might offer some improvement over just tagging spam based on a single
result code in Sniffer. For me, I would for instance tag the Sniffer IP
rules separately from the primary groups giving me the opportunity to
tag spam according to two different methods, though they would be
loosely associated still in this case. Anyway, Pete hasn't promised
anything yet, and it wouldn't have done anything for us for Sniffer to
offer it when Declude didn't support it, and now Delude does.
Personally, I have a desire to do the heavy lifting of parsing out a
message into MIME segments and decoding in a single application, and
then take that data and apply different types of independent tests to
it. Under the single result code format of the past, I would have had
to construct this once for each different result that I was after, but
now I could package it all into a single executable, simplifying the
management of my code, and also reducing the overhead to my Declude setup.
I'll bet that you and others could think of some uses for this if you tried.
Matt
Scott Fisher wrote:
Exitscanonvirus: excellent enhancement.
I've cursed the Process Counter popup after every server restart.
Curious on the reasoning behind the bitmasking external test results.
I haven't run across an external program that uses it. Looking up
'bitmask' and 'external' in the archive, provided suggestions for
bitmasking Invuribl and Message Sniffer.
With Invuribl 2.0 bitmasking is built into the program.
----- Original Message ----- From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Wednesday, May 25, 2005 3:27 PM
Subject: [Declude.JunkMail] Update
Incremental Release
A new incremental release (2.0.6.16) is now available for customers
with a
current service agreement. This release includes:
. Virus scanner rules change option (EXITSCANONVIRUS)
. Bitmasked External Test Results - JunkMail enhancement
. Remove Process Counter Popup
To receive information on releases in the future please send an
E-mail to
[EMAIL PROTECTED] with a body of "subscribe Declude.Releases
Firstname
Lastname".
Customer Information
We have migrated a large portion of our customer accounts from the older
system. The majority of customers can now view their Host information
at the
foot of the 'My Account' page on www.declude.com. Please review it
and let
us know of any discrepancies, missing hosts, wrong names, etc.
Barry
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
