Dear, David, Thank you for replying. > I don't pretend to fully understand Declude (others are far more wise > than I). However, I use fairly standard settings with the exception of > using SNIFFER (weight 17) for enhanced spam detection.
What is SNIFFER? I can't find any mention of it in the Declude.JunkMail manual, http://www.declude.com/JunkMail/manual.htm. There is however a reference to it in both GLOBAL.CFG and $default$.junkmail. Is SNIFFER the same as Mesage Sniffer, http://www.sortmonster.com/? The SNIFFER in GLOBAL.CFG appears to be a reference to some sort external add-in. Is SNIFFER a product from Declude or a 3rd-party product? > I weight HOLDs (for our domain and few others only) at 30+ and have found that I get no > false positives. Other domains get all email and marked using the > following: > > GLOBAL.CFG > SPAM-NONE weightrange x x 0 4 > SPAM-VLOW weightrange x x 5 9 > SPAM-LOW weightrange x x 10 14 > SPAM-MID weightrange x x 15 19 > SPAM-HIGH weightrange x x 20 29 > SPAM-VHIGH weight x x 30 0 So if I am understanding what you have written above correctly it looks like you have used the flexibility of Declude.JunkMail to create your own tests. You created these tests by adding them to GLOBAL.CFG. Is that correct? Are there tests that you have created being referenced again in $default$.junkmail below? Should the last line read "SPAM-VHIGH weightrange x x 30 0"? Or is weight also a "keyword" that Declude.JunkMail understands? Or is that just a typo? What is the significance of having a range "30 0" in the last line? Does that just mean 30+, an open-ended range? What are the "x"'s for in the test definitions? > $default$.junkmail > SPAM-NONE WARN > SPAM-VLOW WARN > SPAM-LOW WARN > SPAM-MID SUBJECT SPAM-MID > SPAM-HIGH SUBJECT SPAM-HIGH > SPAM-VHIGH SUBJECT SPAM-VHIGH In the above section, in the last 3 lines, what is the significance of having the test repeated at the end of the line, e.g. "SPAM-MID SUBJECT SPAM-MID". Was that just a typo? If you are holding on any messages with a weight of 30+ shouldn't the last line read "SPAM-VHIGH HOLD"? For the GLOBAL.CFG and $default$.junkmail above, are these the only tests that you have enabled? > However, these are my settings others will differ in their approach and > implementation. > > All in all the system works exceedingly well. For the not so techie a > utility that wrote config files would be a useful addition (in the same > way that Hunter Stone as an app that creates/modifies web.config file > for asp.Net applications) I wish there was something like that too. I don't feel like I'm going to be able to figure out this program out in the time alotted for the trial period. > Treat GLOBAL.CFG as the place where tests and outgoing actions are > defined. Treat $default$.junkmail as the place where incoming actions > are defined either globally for all domains or on a per domain basis. What is the different between an incoming action and an outgoing action? Isn't everything coming into the IMail server via SMTP basically an incoming action? Does the concept of "incoming" and "outgoing" only kick in if you are isolating specific domain names? Or is an "incoming" action applied when a message is going from a user on the Internet to a user on the IMail server and an "outgoing" action is applied when a message is going from a user on the IMail server to a user on the Internet? If the latter what sort of actions come into play if a message is being sent from an IMail user to an IMail user? Forgive me if this is all basic stuff but I'm just trying to fill in the gaps. All feedback is appreciated. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] ==================================================================== This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
