Tom, Using weight test(s) works very well for us. You can have more than 1 weight test and at any weight. For give me for stating the obvious if you already knew this.
Everybody has their own system and own ideas. One of the more common methods is to have multiple weight tests with different actions for each such as Warn for the lower weights, Subject for middle weights and Hold for the higher weights. What weight you give to each blacklist test will probably take some experimenting till you reach a comfort level for your situation. In our analyzing of our log files and e-mail in our spam trap we are seeing the same situation you mentioned. Spamheaders and another test is in a high percentage of the junk e-mail. Stu At 03:50 AM 03/02/2002 -0500, you wrote: > > >After careful consideration to everyone's views, I have elected >to use the weight10 test to help define spam. I have been looking >through thousands of messages and logs to figure out what the best >method would be for cutting down spam. Most spam will fail more >than one test. Usually a message considered spam will also fail >the Spamheader test. Using the Declude weight test I can now >set Declude to hold just that message and let the other messages >through with a warning. > >If you take a look at the following example, you will see that >there are messages that fail more than one test; > >OSSRC: Jackpot.com spam >SPAMHEADERS: This E-mail has headers consistent with spam > >So if both of these tests have a value of 5 then this mail >would fail based on the weight10 test. > >Any thoughts? > >Regards, >Tom >Image`fx >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- > >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > > ----------------------------------------------------------------------------- CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca 814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker 724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com ----------------------------------------------------------------------------- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
