>1. Many messages with WEIGHT=0 or other weights are logged with single line
>entries!? No from/to/subject information
>
>12/07/2001 01:05:22 Q5bfc2fa . Total weight = 0
At LOGLEVEL MID or higher, Declude will log the total weight for every
E-mail, spam or not.
>12/07/2001 01:06:11 Q5c32194 HEUR10:4 . Total weight = 4
>12/07/2001 01:06:16 Q5c503aa HEUR9:4 . Total weight = 4
>12/07/2001 01:06:27 Q5c5b2fa HEUR8:3 . Total weight = 3
>12/07/2001 01:06:29 Q5c603aa HEUR8:3 . Total weight = 3
These failed the HEUR10/HEUR9/HEUR8 tests, with the appropriate weight.
>2. Declude Crashed (DECLUDE.GP* file are attached)
Thank you for pointing that out. We're investigating this.
>3. Here is the problem with invalid arithmetic that carried over from 1.28.
>Notice how it lists all kind of failed tests in the first log entry - but
>then does NOT list any of these tests (other than SPAMROUTING) in the
>subsequent lines.
>
>12/07/2001 01:11:15 Q5d582f0 OSRELAY:6 SPAMCOP:7 SPAMROUTING:4 HEUR8:3 .
>Total weight = 20
I'm not a mathematician, but when I add 6+7+4+3, I get the same answer (20)
as Declude.
>12/07/2001 01:11:15 Q5d582f0 Msg failed SPAMROUTING (This E-mail was routed
>in a poor manner consistent with spam [20000103].).
>12/07/2001 01:11:15 Q5d582f0 Subject: Prescriptions Without Doctors
>Appointment.....
>12/07/2001 01:11:15 Q5d582f0 From: [EMAIL PROTECTED] To:
>[EMAIL PROTECTED]
If you have the action for OSRELAY, SPAMCOP, and HEUR8 set to IGNORE, then
you may not see a log file entry when E-mail fails those tests. However,
they will still be used towards the weighting.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
