Scott, we do not have anything set to "ignore" and all message that I've found with missing log entries had weights high enough to meet our delete requirements. I am sending you off-list my global.cfg, $default$.junkmail, and log samples to prove my point.
Bill ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, October 27, 2003 8:11 AM Subject: Re: [Declude.JunkMail] Lingering logging issues > > >I am noticing that there are still some logging issues. For example, I am > >running log level MID, but often the "Total weight" line for a message will > >be completely missing from the log file, even though there were several > >tests that failed, as indicated by the "Msg failed" lines. > > That line should always appear *if* the weight of the E-mail is affected by > the tests that failed. If the E-mail fails several spam tests, but the > weight is not affected, the line will not appear. > > >Other times the "Total weight" line will be there, and a test will show up > >with a weight associated with it, but the test will not show up with a "Msg > >failed" line. > > The "Total weight" line includes any tests that the E-mail failed that > affected the weight, whereas the "Msg failed" entry will only appear if the > E-mail failed the test and the action is not set to IGNORE. > > >And even stranger are the log entries for message that are to > >multiple recipients that will have the "Total weight" line, and will have > >all of the "Msg failed" lines for some of the recipients, but be missing > >some of the "Msg failed" lines for other recipients of the same message. > > That's a side-effect of the "IGNORE" action not logging the test. If some > of the recipients use the IGNORE action but others do not, then the "Msg > failed" line will appear for some users but not others. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
