Some months ago there was a posting on this mailing (I don't remember the sender) talking about the BHOLE tests (xyz.blackholes.us, ...)
At the moment we've set for each of this 13 tests a weight of 10% from the hold value. A message should trigger normal only one test. In some rarely cases we've seen also 2 or 3 BHOLE-tests triggered on one single mail. Analizing our declude logfiles I can see, that nearly all messages that trigger an BHOLE-Test has already enough weight to be hold by declude. There are only around 3-5% of messages are not failing enough other tests to get hold. As attachment you can see a greped logfile showing only the tests-failed line and the final weight. Now I'm not sure, if it makes more sense to increase the weight of this tests to 30-50% of the hold-value or to cross out all this tests. Anyone know if this BHOLEs can also be source of legitimate mail? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
