Over the past several weeks our level of spam has doubled and a good majority of it isn't failing enough tests to be blocked based on my settings. The problem is that a good deal of it isn't failing ANY tests or only helobogus and ipnotinmx.
Are you sure that the other tests are running (for example, mail from a backup won't be scanned properly unless you use an IPBYPASS line in the global.cfg file)?
There are a few people who are receiving over 30 spams a day and that is just unacceptable considering we are running antispam software.
It sounds like they are being targeted for some reason; most likely, there is a pattern to the spams they are receiving (for example, almost all may be advertising the same product or service), which means that you'll need to come up with filtering for that user. But, my guess would be a simple configuration issue (such as not having a backup listed in the IPBYPASS option).
Another option is to send me the complete headers of several spams that aren't getting caught; from that, I can often tell if a configuration change is necessary.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
