I will have to watch for this....the thing I noticed last night and today was the following in the declude log files, but am not sure they were for these exact emails, but I have this continually in the declude log files.
07/10/2003 20:11:42 Q0eb9c314012eb215 Msg failed BLACKLISTIP ( This is a spam IP address). Action=IGNORE.
07/10/2003 20:11:42 Q0eb9c314012eb215 Msg failed BLACKLISTDOMAIN (Message failed BLACKLISTDOMAIN test (120)). Action=IGNORE.
Then a couple of lines down I will have:
07/10/2003 20:12:59 Q0f07c404012ee48a Msg failed BLACKLISTIP ( This is a spam IP address). Action=DELETE.
07/10/2003 20:12:59 Q0f07c404012ee48a Msg failed BLACKLISTDOMAIN (Message failed BLACKLISTDOMAIN test (132)). Action=DELETE.
This is what has me confused, it seems to catch the tests, sometimes....
That is the normal behavior. Declude JunkMail doesn't use the same actions for all E-mails that fail a given test. This means that the first E-mail used a configuration file that uses the IGNORE action (or those two tests weren't listed in the config files), but the second one uses the DELETE action. So some E-mails use one configuration file, sometimes there are E-mails that use another configuration file.
If you use "LOGLEVEL MID", the log file will show which configuration file is used.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
