Hey! Thanks for all the quick, helpful responses. In case anyone is interested, here's what I figured out...
I set up a ]TEST]alert.eml for each test type. In the file, I put: ============================ To: [EMAIL PROTECTED] From: postmaster@%LOCALHOST% Subject: [SPAM] Failed: %TESTSFAILED% Warning: %WARNING% Message: %FULLMSG% ============================= Then I set all the tests to ALERT. Now I get a copy of the suspect message in this account (actually alias to me with a filter into a spam folder), and the message gets delivered to the intended recipient too. I can skim the subjects to see what tests fail and look at the body to see what it actually was. When I see something that shouldn't be there (or lots of them), I can adjust the filters. Thanks again for all your help! --Todd. ----- Original Message ----- From: "Todd Ryan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 19, 2002 3:43 PM Subject: [Declude.JunkMail] Newbie question... > Hi all, > > Just installed JunkMail Pro with the default settings. Did some tests using > "rsp set off" and I'm getting the warning in the headers as expected. What > an awesome product, Scott! > > Since I've received over 100 spam messages in the last 40 minutes (from the > log info), I'm quickly realizing that I'm going to want to do some close > monitoring. > > This thing is chock full of tweaks and settings so I have a feeling this is > possible. Just didn't see it in the documentation or the list archives. > Forgive me if this has been covered before... > > While testing...I'd like to do something similar to WARN and HOLD at the > same time. That is, let the message go through but keep a copy for > evaluation when I have time. This could be either in the \spool\spam folder > or forwarded/copied to a dummy account and checked via email. > > I'm just worried that if I HOLD them, I wouldn't be able to dedicate enough > time to checking the spam folder regularly and processing them in an > acceptable timeframe to get the legit ones through. If I can hold a *COPY* > then I won't need to check a hundred or more every hour. I can scan through > them once a day or so and won't have to worry about getting the false > positives back into the queue quickly. > > I thought about using WARN and an IMail Rule to copy them to another folder > (based on the X-RBL header) but I rememeberd that IMail won't let you copy > another folder based on a rule, just forward. There's got to be another way > to make this happen, right? > > Thanks! > > --Todd. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .