We are using DJM Pro. I have a message that was "held" by DJM and I'm not clear on why it was "held". According to the headers the "weight" exceeded the current "hold weight" for the domain but I can't figure out how DJM added up the tests that it failed to come up with that "weight".
The best way to troubleshoot weights is to use "LOGLEVEL MID" in the \IMail\Declude\global.cfg file. This will add a line to the log file that shows how Declude JunkMail came up with the weight (except that it does not include weights from lines within filters; that should be changed soon).
X-Spam-Tests-Failed: OSSOFT, EASYNET-DNSBL, SBL, ROUTING, WEIGHT05, WEIGHT07, WEIGHT09, WEIGHT10, WEIGHT13, FILTER-MAILFROM [13]
If add up all of the weights...
OSSOFT + EASYNET-DNSBL + SBL + ROUTING + WEIGHT05 + WEIGHT07 + WEIGHT09 + WEIGHT10 + WEIGHT13 + FILTER-MAILFROM
I get...
5 + 7 + 5 + 4 + 0 + 0 + 0 + 0 + 0 + (-5) = 16
... but the number in brackets at the end of the "X-Spam-Tests-Failed:" is 13. I can't figure out where it's coming up with the number 13.
It's probably because you have a test with a "negative weight" -- one that the E-mail did *not* fail, so a weight was subtracted from the total weight of the E-mail. The IPNOTINMX and NOLEGITCONTENT tests are two tests that work this way.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
