In the last two days I have added several ip4r tests to my global.cfg and def.jm files, added 2 fromfile blacklist tests, and bumped up the weight of a few tests that were already there. This seems to have significantly cut down on the amount of spam getting through without catching much more legit mail.
So I'm happy, but I have noticed something a bit strange. The percentage of mail that is showing up in the console as SPAM has fallen to the 55-60% range, whereas before I made the recent changes it usually hovered around 75-80%. Logic dictates that since there are more tests for a message to fail that there should be a higher percentage of messages showing up as SPAM now than there was before. I can only come up with 2 theories. Theory1 - Some spammers now realize their SPAM is not getting through and have since stopped sending to our mailserver. I consider this HIGHLY unlikely since we don't send out bounces, just delete messages (and also since I doubt this would alter spammer behavior anyway.) Theory2 - Do messages that fail any test associated with the DELETE action not appear in the console? I doubt this is the case either, but it would help to explain the drastic drop in the percentage of mail that the console is listing as SPAM. Anyone have any ideas/theories? Thanks Bart Lackorn STIC.NET --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
