Hello Tom,

Monday, April 15, 2002, 15:58:19 PM, you wrote:

>> Welcome to the club a while back when I started on this list there was
>> a post to a tool called delog which I downloaded and setup and ran.

T> How long ago did you download this program?
T> Becuase there has been a recent update to address long file names.

Pretty recently I think I downloaded an updated version last week.

>> Since I started running that one (infrequently usage) I always get the
>> depressing results 62-67% junk that is getting blocked by declude :(

T> Delog only looks at what Declude writes in its log files.  If Declude
T> states the Message Failed, then Delog counts it as SPAM.  It is up to
T> you to tell Declude what do.

Ahh ok good to know.

>> This weekend is first time I found in the hold folder any considerable
>> amount of "legit" mail that gotten held that I had to put back in
>> queue.

T> There must be a reason for this, perhaps you should look into using
T> a weight configuration with Declude.

I am using a weighted configuration.
However for a few tests I do bounce/hold/delete without question.
Like SPAMCOP I get so much that is caught by it that my postmaster
account would get flooded by failure to deliver messages if I had
bounce on it. And would create a considerable amount of mail in the
hold directory so it's set to delete.
ORBZ I used to bounce until they where shutdown. ORDB, OSSOFT I
bounce all others I just tag with a weight. Anything over 20 is held
and over 30 deleted. Weight 10 gets a warning tag.
Percent is automatically held as well as OSSRC .

>> (PS Spamreview is GREAT I hope I'm not the only one that
>> donated money to the guy for writing this great tool).

T> Delog is only a log analyzer, and was not intended to compete with 
T> other programs.  It was created to help you figure out what's going
T> on with the Declude log file and your tests.  This will allow you
T> to figure out what test is most effective.  Besides, we have not
T> even charged for it. 

Wasn't meant to compare delog with spamreview. They are both valuable
tools for me. Delog to actually get a feeling on how much is getting
blocked and what tests are failing to easily and quickly see how it's
performing. If you would have a donation link you can rest assure that
I would give you some also. As I told a while back when I got delog
running (I had misunderstood how it was supposed to function -doh-)
I would pay for it if you charged for it.

T> Any way here is an example:

T> Delog found 405 Messages, 92 of them Failed.  This indicate that
T> 23% of your messages failed and may be considered SPAM by Declude
T> or however you configured Declude.

Try more like 6-8k messages and 3-5k failed. When looking on what is
being held by weight almost everything really IS junk.
We run a small dialup ISP so part of the failed could very well be
that the accounts are no longer active and still is getting mail from
mailinglists/"opt-in lists"/spam & people that have old e-mail addys.

Would be interesting to be able to tell how many that was failed due
to none existing e-mail address/account.

T> You have selected 9 tests for Delog to search for.  Out of the 9
T> only 6 of them returned a failure and out of 405 messages only
T> 92 messages failed any one of these tests.

That I do figured out it must be.

T> The following example shows the amount of messages that failed
T> a user defined test.  This means the same message could fail more
T> than one test, however, we do not count it towards the total failed.

T>        OSSRC failed: 31
T>       OSSOFT failed: 0
T>      SPAMCOP failed: 39
T>        KFROM failed: 15
T>     MAILFROM failed: 0
T>   BADHEADERS failed: 31
T>  SPAMHEADERS failed: 45
T>      PERCENT failed: 0
T>     WEIGHT10 failed: 56

T> Total Messages failed Selected tests: 92

Here's fridays

Log file examined: I:\IMail\spool\dec0412.log

Unique Message Count: 7420
Failed Message Count: 4071
Total Percentage of Spam: 55%

User Selected tests: 20

       OSSRC failed: 585
      OSSOFT failed: 155
       OSDUL failed: 8
      OSFORM failed: 0
      OSLIST failed: 0
     OSRELAY failed: 281
     SPAMCOP failed: 1349
        DSBL failed: 37
     DSBLALL failed: 37
   DSBLMULTI failed: 0
        ORDB failed: 273
    MAILFROM failed: 50
  BADHEADERS failed: 1147
 SPAMHEADERS failed: 1798
      REVDNS failed: 1026
     ROUTING failed: 188
     NOABUSE failed: 1324
    WEIGHT10 failed: 2281
    WEIGHT20 failed: 949
    WEIGHT30 failed: 0

Total Selected tests failed: 16
Total Messages failed Selected tests: 4071

(BTW since Spamcop don't have a way to donate or for us as isp pay
them I signed up as a normal report account to give them my support)

T> The following example should give you an idea how Delog actually works
T> when reading Declude's log file:

T> MSG_01 msg ok   Delog counts this as message 1
T> MSG_02 FAILED   Delog counts this as message 2 and that it failed
T> MSG_02 FAILED   Delog only counts the test if applicable - if SPAMCOP
T> MSG_02 FAILED   Delog only counts the test if applicable - if BADHEADERS
T> MSG_02 FAILED   Delog only counts the test if applicable - if SPAMHEADERS
T> MSG_03 msg ok   Delog counts this as message 3
T> MSG_04 FAILED   Delog counts this as message 4 and that it failed
T> MSG_04 FAILED   Delog only counts the test if applicable - if REVDNS

T> Delog would report a total of 2 messages failed out of 4.  That's 50%.
T> Delog will also report the following:

T> Spamcop failed 1
T> Badheaders failed 1
T> Spamheaders failed 1

T> However, you may have noticed only 1 message actually failed these tests.
T> Delog will only count these as one failure.

T> REVDNS failed 1

T> Only one message actually failed this test.


T> If you need more information, just let me know.

1.05b latest version ?

Is there anyway that an none existing mail account could be counted as
a failed delivery or something ?

/ Eje

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to