RE: [Declude.JunkMail] How do I make sure all of the failedtests appear in the headers?

[R. Scott Perry]

Here is an example message result.

Here is what the log file shows:

01/30/2003 09:32:43 Q53873aa Msg failed HELOBOGUS (Domain terminal has no MX/A records.).
01/30/2003 09:32:43 Q53873aa Msg failed BADHEADERS (This E-mail was sent from a broken mail client [8040000e].).
01/30/2003 09:32:43 Q53873aa Msg failed REVDNS (This E-mail was sent from a MUA/MTA 64.238.119.21 with no reverse DNS entry.).
01/30/2003 09:32:43 Q53873aa Msg failed WEIGHT10 (Weight of 12 reaches or exceeds the limit of 10.).

OK, in this case, the E-mail failed 3 spam tests that have a total weight of 12, which is why the E-mail failed the WEIGHT10 test.

Here is what the message header says:

[Possibly SPAM - Failed RDNS lookup]

Ouch -- you need to fix that second header (which is a broken header), so that it looks like:

X-RBL-Warning: [Possibly SPAM - Failed RDNS lookup]

Otherwise, it can cause problems with mail clients. This would most likely be in the line beginning with "REVDNS" in the \IMail\Declude\global.cfg file (which is probably set up as "REVDNS WARN [Possibly SPAM - Failed RDNS lookup]", but should be "REVDNS WARN X-RBL-Warning: [Possibly SPAM - Failed RDNS lookup]").

What I want is for every failed test to show up in the warnings as I want to
really start tracking the false positives and see if I can reduce the number
of messages held.

The easiest way to do this is with the line:

XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%]

in your \IMail\Declude\global.cfg file. This will add a header that will always appear in incoming E-mail, which will display a list of tests that the E-mail failed.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.