Hi Dave,

 

I agree with you that the total weight of 9 is correct (I had already
"piecemealed" that arithmetic together in my msg). 

 

>> As Commtouch Zerohour was implemented differently that regular tests
(because it runs as part of the AV code) it is not listed in this log line.
Agreed it should be <<

 

Good - because, if your programmer was able to add "ZeroHour" to the "Tests
Failed" line, and also to the "SMTP Headers" variable, in the various
sections of the program flow - then I'd say it was merely an oversight that
it was omitted from the ONE log line that "should be the complete list of
tests used in calculating the score", as you already confirmed.

 

>> I believe this is the list of  "non-zero" tests you are looking for with
the exception of Commtouch ZEROHOUR. <<

 

Right - so all we need is to get the missing ZEROHOUR included, so that it
truly IS a list of non-zero tests.

 

Thanks for checking into this.

 

Best Regards,

Andy

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Monday, May 03, 2010 12:10 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Reporting of Tests Failed Incomplete?

 

The Tests failed (Triggered) showing tests that ARE triggered. In this case:

 

Tests failed [weight=9]: 

 

SPFPASS=IGNORE[-2] 

CONTENT=IGNORE[7] 

ZEROHOUR=WEIGHT[6]

 

Total: 11

 

As nIPNOTINMX:-2 is NOT triggered it cannot be in the same list of emails
that ARE triggered, providing the -2 to the final equation we have a correct
Total of.

 

Total: 9

 

As Commtouch Zerohour was implemented differently that regular tests
(because it runs as part of the AV code) it is not listed in this log line.
Agreed it should be, but this line should be the complete list of tests used
in calculating the score. I believe this is the list of  "non-zero" tests
you are looking for with the exception of Commtouch ZEROHOUR.

 

q4d2f00008f571d69.smd nIPNOTINMX:-2 SPFPASS:-2 CONTENT:7 .  Total weight =
9.

 

nIPNOTINMX:-2 

SPFPASS:-2 

CONTENT:7

 

Total: 3

 

ZEROHOUR=6

 

Total: 9

 

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
 <mailto:dbar...@declude.com> dbar...@declude.com

 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to