Re: [Declude.JunkMail] Clarification..needed
Scott, Sure seems to work like a charm. Again - very kool! -Nick There is a new interim release (1.76i28) at http://www.declude.com/release/176i/declude.exe that changes the way that the weight is calculated (in i27 it would count negative weights, but no longer will), and adds logging at LOGLEVEL HIGH that should help determine if there are other issues. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Clarification..needed
- Original Message - From: R. Scott Perry [EMAIL PROTECTED] There is a new interim release (1.76i28) at http://www.declude.com/release/176i/declude.exe that changes the way that the weight is calculated (in i27 it would count negative weights, but no longer will), and adds logging at LOGLEVEL HIGH that should help determine if there are other issues. Just for a bit of further clarification, when you say it will no longer count negative weights, does that mean the score will not be reduced by negative weights, even if they are list first in a filter file? Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Clarification..needed
There is a new interim release (1.76i28) at http://www.declude.com/release/176i/declude.exe that changes the way that the weight is calculated (in i27 it would count negative weights, but no longer will), and adds logging at LOGLEVEL HIGH that should help determine if there are other issues. Just for a bit of further clarification, when you say it will no longer count negative weights, does that mean the score will not be reduced by negative weights, even if they are list first in a filter file? That just refers to weights in the last column in the test definitions. For example, the IPNOTINMX test ends in ... 0 -3. That -3 was originally used in counting the weight (if the E-mail did not or had not yet failed the test), but no longer is. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Clarification..needed
- Original Message - From: R. Scott Perry [EMAIL PROTECTED] There is a new interim release (1.76i28) at http://www.declude.com/release/176i/declude.exe that changes the way that the weight is calculated (in i27 it would count negative weights, but no longer will), and adds logging at LOGLEVEL HIGH that should help determine if there are other issues. Just for a bit of further clarification, when you say it will no longer count negative weights, does that mean the score will not be reduced by negative weights, even if they are list first in a filter file? That just refers to weights in the last column in the test definitions. For example, the IPNOTINMX test ends in ... 0 -3. That -3 was originally used in counting the weight (if the E-mail did not or had not yet failed the test), but no longer is. I'm sorry, Scott, I must have a mental block here. Are you saying that the -3 for the IPNOTINMX test is not deducted before the filter tests are run, but would still be deducted after all of the filter tests have been run, and before final disposition of the message? Sorry for being dense, I just want to make sure I understand the new scoring process. Thanks, Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Clarification..needed
That just refers to weights in the last column in the test definitions. For example, the IPNOTINMX test ends in ... 0 -3. That -3 was originally used in counting the weight (if the E-mail did not or had not yet failed the test), but no longer is. I'm sorry, Scott, I must have a mental block here. Are you saying that the -3 for the IPNOTINMX test is not deducted before the filter tests are run, but would still be deducted after all of the filter tests have been run, and before final disposition of the message? Sorry for being dense, I just want to make sure I understand the new scoring process. The weight of the E-mail will remain the same. All that changes is the way that the SKIPIFWEIGHT option calculates the weight to determine whether or not to skip the test. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Clarification..needed
Scott: I added the following: SKIPIFWEIGHT60MAXWEIGHT60 I thought this would force the filter to skip if the weight is 60 and if the weight inside the filter reaches 60 it should also exit. Interestingly enough none of the filters that have this at the top ever execute. Regards, Kami
Re: [Declude.JunkMail] Clarification..needed
I added the following: SKIPIFWEIGHT 60 MAXWEIGHT 60 I thought this would force the filter to skip if the weight is 60 and if the weight inside the filter reaches 60 it should also exit. Interestingly enough none of the filters that have this at the top ever execute. There is a new interim release (1.76i28) at http://www.declude.com/release/176i/declude.exe that changes the way that the weight is calculated (in i27 it would count negative weights, but no longer will), and adds logging at LOGLEVEL HIGH that should help determine if there are other issues. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Clarification..needed
Hi Scott: What I did was to move all of our negative weights to the top of the global.cfg file. None of our filter files have mixed positive negative weights- they are either all positive or all negative. Considering what you stated earlier that the tests are run according to the order they are listed in the global.cfg it seems like moving the negative weight tests to the top is the right thing to do. After adding the two lines to the top (considering we delete on 60) and again considering all the negative weights are done first the filters that have the two lines were expected not to run only if the weight is 60. The following is the order I had things listed. 1: IP4r, spamdomains, helobogus... Etc. 2: Negative tests 3: Filters with the two lines at top. Our spam folder all of a sudden had about 20 emails in it all at weights of 30 -50.. And none have any of the filters listed. The log file shows none of the filters being run. I commented the two lines and will do more test tomorrow.. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Tuesday, November 25, 2003 6:53 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Clarification..needed I added the following: SKIPIFWEIGHT 60 MAXWEIGHT 60 I thought this would force the filter to skip if the weight is 60 and if the weight inside the filter reaches 60 it should also exit. Interestingly enough none of the filters that have this at the top ever execute. There is a new interim release (1.76i28) at http://www.declude.com/release/176i/declude.exe that changes the way that the weight is calculated (in i27 it would count negative weights, but no longer will), and adds logging at LOGLEVEL HIGH that should help determine if there are other issues. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
