I wondered if it's
possible to set another one higher to do the deleting, as I'm seeing a lot
of stuff at 40 or more.
Absolutely. Several action directives can coexist peacefully in your
$default$.junkmail file, like this:
WEIGHT10 SUBJECT [%WEIGHT%]
WEIGHT20 MAILBOX SPAM
WEIGHT30 DELETE
Any message scoring at least 10 will have the weight added at the head of
the subject in brackets, like:
[12] Buy My Stuff!
Any message with 20-29 points will be diverted to the spam folder, and
anything scoring 30+ will be deleted.
----- Original Message -----
From: "Todd Richards" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Thursday, November 02, 2006 11:55 PM
Subject: RE: [Declude.JunkMail] One step forward, ten back
Thanks Dave. Actually, I do, but with settings of weight20 <send to spam
mailbox>. I was worried about too many false positives. I wondered if
it's
possible to set another one higher to do the deleting, as I'm seeing a lot
of stuff at 40 or more.
As an update, I found that I had a discrepancy in my weights. I corrected
that, and my filtering is doing great now. I logged into my spam mailbox
a
little bit ago and the few hundred messages that are in there are
definitely
spam. So it's catching things now and keeping them from my mailbox -
which
was my main goal. However, now I'd like to clean things up just a little
more...
Todd
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
Doherty
Sent: Thursday, November 02, 2006 9:34 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] One step forward, ten back
It seems like you're detecting things OK, but not taking action on the
results.
Make sure you have directives like
WEIGHT14 MAILBOX SPAM
WEIGHT20 DELETE
in your default.junkmail file
----- Original Message -----
From: "Todd Richards" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Thursday, November 02, 2006 7:38 PM
Subject: [Declude.JunkMail] One step forward, ten back
Hi Everyone -
We are getting completely hammered by spam and I'm about at my wits end.
A
few weeks ago I added a 30-day trial of Message Sniffer and it doesn't
seem
to be doing any good. Today, I upgraded to the newest version of
Declude.
I "think" everything went ok. After reading through the documentation
(again) I went through my global.cfg file and cleaned up some things that
were questionable. For instance, we had several domains in the WHITELIST
TO
and WHITELIST FROM. From what I've read and heard through the lists,
it's
not a good idea to whitelist anything. In fact, earlier today I had
some
spam come through that was "from" a whitelisted domain so it just let it
through. So I commented them out and planned to watch my spam account
(instead of deleting I have caught messages sent to another account for
review) to see the results.
So... This happened about 5pm tonight. I went through a short spurt but
in
the last 90 minutes since then I alone have received over 150 spam
messages.
Before I made my changes tonight, that is about the number I would
receive
in one day (which is still too many). In one message, this was in the
header. To me, it should have failed and been stopped.
X-Declude-Scan: Incoming Score [39] at 17:59:29 on 02 Nov 2006
X-Declude-Fail: CBL [6], FIVETEN-SRC [4], SPAMCOP [7], REVDNS [8],
ROUTING
[2], SNIFFER [12], WEIGHT10 [10], WEIGHT14 [14], WEIGHT20 [20], WEIGHT20a
[20]
Does anyone have any suggestions to what I might be doing wrong, or what
I
should look at next? Would anyone (off-list) be willing to look at my
config files and see if something is apparently wrong? Are there any
sample
files where a newbie might be able to see how others have theirs set up?
I
have been running Declude for over a year, and with the exception of some
minor tweaks, it's pretty much running "out-of-the-box". For those who
are
interested, I'm running Imail 8.22 (with latest hotfix) on Windows 2000
server, as well as the Declude Suite, Message Sniffer, and inv-URBL 2.7.
Thanks for any input or direction you can offer.
Todd
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
