Thanks Scott. I've enabled the HEUR10 test with a weight of "0" and the "WARN" action to see what kinds of messages would get flagged. I have found several flagged messages that were indeed spam, but can you tell me what the heuristic tests are looking for in the e-mail messages. Is it key words in the subject and/or message body or something else?
Bill -----Original Message----- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: Monday, June 03, 2002 6:37 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] [IMail Forum] May Spam Statistics >Interesting stats, Scott. I'm wondering where I can find out more about the >heuristics tests, how they work with Declude JunkMail and how to implement. The heuristics tests have never been officially released from beta, mostly because there are a number of false positives on mailing lists. However, it can work well with the weighting system, so it may come back to life. To use them, you need to define the test in the \IMail\Declude\global.cfg file, like this: HEUR heuristics x x 5 0 or: HEUR10 heuristics 10 x 8 0 The "10" there is a "spaminess" level, from 1 to 10, where 1 is "almost certainly not spam" and 10 is "almost certainly spam". Then, you need to determine the action to take (IE "HEUR10 WARN"), or you can just have it count towards the weighting system. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This e-mail was scanned for viruses by Pointshare's Virus Scanning Service] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
