They are one and the same. The test name is SNIFFER, the product name is Message Sniffer. It is a third party program used to detect spam, that can be hooked into Declude JunkMail.> I don't pretend to fully understand Declude (others are far more wise > than I). However, I use fairly standard settings with the exception of > using SNIFFER (weight 17) for enhanced spam detection.What is SNIFFER? I can't find any mention of it in the Declude.JunkMail manual, http://www.declude.com/JunkMail/manual.htm. There is however a reference to it in both GLOBAL.CFG and $default$.junkmail. Is SNIFFER the same as Mesage Sniffer, http://www.sortmonster.com/?
Those are custom tests, which were added to the global.cfg file. Those lines define the tests (test definitions always go in the global.cfg file); to use them on incoming E-mail, you would need a corresponding line in the \IMail\Declude\$default$.JunkMail file (such as "SPAM-HIGH HOLD", which would quarantine any E-mail failing the SPAM-HIGH test, which in this case is E-mail with a weight between 20 and 29).> SPAM-NONE weightrange x x 0 4 > SPAM-VLOW weightrange x x 5 9 > SPAM-LOW weightrange x x 10 14 > SPAM-MID weightrange x x 15 19 > SPAM-HIGH weightrange x x 20 29 > SPAM-VHIGH weight x x 30 0 So if I am understanding what you have written above correctly it looks like you have used the flexibility of Declude.JunkMail to create your own tests. You created these tests by adding them to GLOBAL.CFG. Is that correct? Are there tests that you have created being referenced again in $default$.junkmail below? Should the last line read "SPAM-VHIGH weightrange x x 30 0"?
The last line is correct -- it defines a test that gets triggered with a weight of 30 or higher (with no upper limit).
What is the significance of having a range "30 0" in the last line? Does that just mean 30+, an open-ended range?Actually, I wouldn't worry about that one right now. The weightrange test type is a bit different, as it has the low and high weights in the test definition. Normally, the last number in a test definition is 0, which is the weight that gets added to E-mail that does NOT fail the test (a fairly confusing topic, which is why it probably is best not to worry about it).
Those are used as placeholders. A test definition has the test name followed by the test type, then 2 pieces of test-specific information, followed by the weight for the test, and the 0. An "x" is used for the test-specific information for tests that don't need such information (such as the weight tests).What are the "x"'s for in the test definitions?
With the SUBJECT action, you can specific the text to use to alter the subject. In this case, an E-mail failing the SPAM-MID test would have "SPAM-MID" added to the subject.> SPAM-MID SUBJECT SPAM-MID > SPAM-HIGH SUBJECT SPAM-HIGH > SPAM-VHIGH SUBJECT SPAM-VHIGH In the above section, in the last 3 lines, what is the significance of having the test repeated at the end of the line, e.g. "SPAM-MID SUBJECT SPAM-MID".
If you are holding on any messages with a weight of 30+ shouldn't the last line read "SPAM-VHIGH HOLD"?
Yes. :)
If you need more time to fully evaluate Declude JunkMail, be sure to let me know, as we can extend the evaluation period in most cases if necessary.I wish there was something like that too. I don't feel like I'm going to be able to figure out this program out in the time alotted for the trial period.
Incoming actions are used on incoming E-mail (what you would normally use, and what most people expect from a mailserver anti-spam program).What is the different between an incoming action and an outgoing action?
An outgoing action is the action to take on outgoing E-mail that fails certain spam tests. Outgoing actions are rarely used (they might be used if you were worried that your users were going to send spam).
Isn't everything coming into the IMail server via SMTP basically an incoming action?
Yes.
Or is an "incoming" action applied when a message is going from a user on the Internet to a user on the IMail server and an "outgoing" action is applied when a message is going from a user on the IMail server to a user on the Internet?
That is correct.
If the latter what sort of actions come into play if a message is being sent from an IMail user to
an IMail user?
In this case, it will be treated as an incoming E-mail.
These are some very good questions, and I'm hoping other people new to Declude JunkMail read this, to help them learn about Declude JunkMail. It also helps point out areas where the manual may need improvement.Forgive me if this is all basic stuff but I'm just trying to fill in the gaps.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
