Scott:

Here is an example message result.

Here is what the log file shows:

01/30/2003 09:32:43 Q53873aa Msg failed HELOBOGUS (Domain terminal has no
MX/A records.).
01/30/2003 09:32:43 Q53873aa Msg failed BADHEADERS (This E-mail was sent
from a broken mail client [8040000e].).
01/30/2003 09:32:43 Q53873aa Msg failed REVDNS (This E-mail was sent from a
MUA/MTA 64.238.119.21 with no reverse DNS entry.).
01/30/2003 09:32:43 Q53873aa Msg failed WEIGHT10 (Weight of 12 reaches or
exceeds the limit of 10.).

Here is what the message header says:

X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8040000e].
[Possibly SPAM - Failed RDNS lookup]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Note: Total spam weight of this E-mail is 12.

And this is what the junkmail warnings say:

X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8040000e].

What I want is for every failed test to show up in the warnings as I want to
really start tracking the false positives and see if I can reduce the number
of messages held.

Chuck Schick
Warp 8, Inc.
303-421-5140
www.warp8.com


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
> Sent: Thursday, January 30, 2003 10:47 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] How do I make sure all of the failed
> tests appear in the headers?
>
>
>
> >We hold at a weight of 10 and delete at 20 and I use Spam
> review to clean
> >out the hold folder.  I have noticed lately that sometimes a
> message shows
> >that it has failed only one test and has a weight of 10+ (we
> have no single
> >test with a weight of 10) so obviously I am not getting all
> of the tests
> >recorded in the headers.  How do I go about making sure that
> all failed
> >tests get recorded.
>
> Do you mean "The X-Spam-Tests-Failed: header showed that only
> one test
> failed" (which would indicate a problem), or "There was only one
> X-RBL-Warning: header" (which would be quite normal)?
>
> What does the Declude JunkMail log file show for one of these E-mails?
>                                 -Scott
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to