Scott, >> It's possible that there is a per-user or per-domain configuration that doesn't include the WEIGHT8 or WEIGHT10 test <<
My declude folder only contains 5 directories: - AJProPercussion.com - HotelsAtHome.com - TelemetricsInc.com - WebsterWatch.com - ZonePerfect.com I don't have any per-user configurations. I know you checked your log files - but I can honestly say - the weighting arithmetic is totally arbitrary. Here are BADHEADER/SPAMHEADER combinations that are literally minutes apart - and THREE different results and NONE of them is the correct figure. Only ONE of them is for a domain name that has it's custom $default$.Junkmail file. 11/06/2001 02:26:10 Q908f3fc Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c0200201].). 11/06/2001 02:26:10 Q908f3fc Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c0200201].). 11/06/2001 02:26:10 Q908f3fc Subject: ujdrh 11/06/2001 02:26:10 Q908f3fc From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] NO WEIGHT triggered! 11/06/2001 02:28:17 Q910d3ea Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c0204200].). 11/06/2001 02:28:17 Q910d3ea Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c0204200].). 11/06/2001 02:28:17 Q910d3ea Msg failed WEIGHT10 (Weight of 12 exceeds the limit of 10.). 11/06/2001 02:28:17 Q910d3ea Msg failed WEIGHT8 (Weight of 12 exceeds the limit of 8.). 11/06/2001 02:28:17 Q910d3ea Subject: Are you in debt? [io8yz] 11/06/2001 02:28:17 Q910d3ea From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] WEIGHT 12 calculated (should be 8) 11/06/2001 02:56:42 Q97b730a Msg failed BADHEADERS (This E-mail was sent from a broken mail client [c0400202].). 11/06/2001 02:56:42 Q97b730a Msg failed SPAMHEADERS (This E-mail has headers consistent with spam [c0400202].). 11/06/2001 02:56:42 Q97b730a Msg failed WEIGHT10 (Weight of 11 exceeds the limit of 10.). 11/06/2001 02:56:42 Q97b730a Msg failed WEIGHT8 (Weight of 11 exceeds the limit of 8.). 11/06/2001 02:56:42 Q97b730a Subject: WARNING: PROTECT YOUR NAME IN CANADA 11/06/2001 02:56:42 Q97b730a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] WEIGHT 11 calculated (should still be 8) The /Declude/Config.cfg file contains: ... BADHEADERS badheaders x x 5 0 SPAMHEADERS spamheaders x x 3 0 SPAMROUTING spamrouting x x 4 0 REVDNS revdnsexists x x 5 0 ... WEIGHT10 weight x x 10 0 WEIGHT8 weight x x 8 0 ... BADHEADERS WARN SPAMHEADERS WARN SPAMROUTING WARN REVDNS WARN PERCENT HOLD Could the OUTBOUND settings in Config.cfg cause the problem? Here is the /Declude/$Default$.JunkMail file: RBL BOUNCE DUL BOUNCE RSS BOUNCE OSDUL BOUNCE OSSOFT BOUNCE ORDB BOUNCE WEIGHT10 BOUNCE WEIGHT8 SUBJECT SPAM: [See Headers] REVDNS ALERT Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax: +1 201 934-9206 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Tuesday, November 06, 2001 03:21 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude 1.28 - Weighting not Working? >Given this CONFIG File: > >BADHEADERS badheaders x x 5 0 >SPAMHEADERS spamheaders x x 3 0 >SPAMROUTING spamrouting x x 4 0 >REVDNS revdnsexists x x 5 0 >HEUR10 heuristics 10 x 4 0 >HEUR9 heuristics 9 x 4 0 >HEUR8 heuristics 8 x 3 0 >HEUR heuristics > >WEIGHT10 weight x x 10 0 >WEIGHT8 weight x x 8 0 > >why doesn't the second log entry report that weight8 and/or weight10 has >been exceeded? > >11/04/2001 03:39:42 Qfec315c Msg failed SPAMHEADERS (This E-mail has header s >consistent with spam [60000303].). >11/04/2001 03:39:42 Qfec315c Msg failed SPAMROUTING (This E-mail was routed >in a poor manner consistent with spam [60000303].). >11/04/2001 03:39:42 Qfec315c Msg failed REVDNS (This E-mail was sent from a >mail server with no reverse DNS entry.). It should. It's possible that there is a per-user or per-domain configuration that doesn't include the WEIGHT8 or WEIGHT10 test, which would account for this. Note that the WEIGHT8/WEIGHT10 tests will only get displayed in the log if they are being used for that E-mail. > Here's the opposite problem - when *I* add up the weight, only get 14 - but > the log claims a value of 18. How does this compute? > ORDB ip4r relays.ordb.org * > SPAMCOP ip4r bl.spamcop.net 127.0.0.2 7 0 > ... > BADHEADERS badheaders x x 5 0 > SPAMHEADERS spamheaders x x 3 0 > SPAMROUTING spamrouting x x 4 0 > ... > WEIGHT10 weight x x 10 0 > WEIGHT8 weight x x 8 0 > 11/04/2001 03:57:02 Q02d5274 Msg failed ORDB (Blackholed by ORDB -- see > http://ordb.org/lookup/?host=200.190.82.26). > 11/04/2001 03:57:02 Q02d5274 Msg failed SPAMCOP (Blocked - see > http://spamcop.net/bl.shtml?200.190.82.26). > 11/04/2001 03:57:02 Q02d5274 Msg failed SPAMHEADERS (This E-mail has headers > consistent with spam [60000303].). > 11/04/2001 03:57:02 Q02d5274 Msg failed SPAMROUTING (This E-mail was routed > in a poor manner consistent with spam [60000303].). I also count 14 for this one. The next release will include a line that shows exactly how the value is calculated. Every one I've checked here has added up correctly, but the new log file entry will show what Declude is thinking. -Scott --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
