Hi Scott:
>> it may be best if we switch it back to LOGLEVEL LOW, but have an option
to turn it off. <<
Thanks - that's what I was hoping for.
In the alternative, use a slightly expanded format, such as:
SPAMHEADER[nnnnnnnnn]=IGNORE,...
That could even be helpful for IP based tests, e.g.:
SBL[127.0.0.2]=IGNORE,XBL[127.0.0.4]=IGNORE,...
Or, stick THAT information in the weight line:
BADHEADERS[nnnnnnnnn]:5 HELOBOGUS:3 SPAMHEADERS[nnnnnnnnn]:3
SBL[127.0.0.2]:8
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax: +1 201 934-9206
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, January 07, 2004 09:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Major Change in Declude Log File Format?
Effects Reporting Applications?
>With this latest build, the log file no longer has "single line"
>entries for each failed test?
Correct. Those were moved to LOGLEVEL HIGH, as log files are now often
more than 10 times the size they were a year or two ago (due to the larger
volumes of spams, and the higher number of spam tests).
>The biggest "loss" I see is for badheaders/spamheaders and other non-IP
>based test. The "IP" based stuff is easy to reconstruct from other
>sources - but the badheaders/spamheaders "reason codes" were helpful
>when investigating false-positive reports.
Ah, that is a good point. It looks like it may be best if we switch it
back to LOGLEVEL LOW, but have an option to turn it off.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
