Yes, I'm still using LogLevel=MID. 

Never changed it - unless someone tells me that LOW or HIGH are more
appopriate.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206 



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, January 12, 2004 08:23 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] 1.77i15 Log Issues



>A) Weight changed between first line (3)  and last line (0) of log?

That one is correct:

>01/12/2004 17:39:05 Q21ff107901f265c0 DSBLMULTI:3 .  Total weight = 3.
>
>01/12/2004 17:39:05 Q21ff107901f265c0 NOT bypassing whitelisting of 
>E-mail with weight >=20 (3) and at least 1 recipients (1).
>
>01/12/2004 17:39:05 Q21ff107901f265c0 NOT bypassing whitelisting of 
>E-mail with weight >=15 (3) and at least 4 recipients (1).

The weight is 3 here, but:

>01/12/2004 17:39:05 Q21ff107901f265c0 Skipping4 E-mail from 
>[EMAIL PROTECTED]; whitelisted [EMAIL PROTECTED]

The E-mail is whitelisted, so it goes down to 0.

>B) Email without the "TEST1:n TEST2:n TESTm:n .  Total Weight = nn" 
>line at the beginning but with "weight=0" at bottom:
>
>01/12/2004 17:40:45 Q226a2e6500bc05c4 Tests failed [weight=5]: 
>REVDNS=ALERT WEIGHTHDR=WARN WEIGHTFOOTER=FOOTER
>
>01/12/2004 17:40:55 Q226b2eb1017c0bfd Subject: Paintball Guns and 
>Supplies
>
>01/12/2004 17:40:55 Q226b2eb1017c0bfd From: [EMAIL PROTECTED] 
>To: [EMAIL PROTECTED]  IP: 63.170.102.99 ID:
>
>01/12/2004 17:40:55 Q226b2eb1017c0bfd Tests failed [weight=0]:

Are you still using LOGLEVEL MID?  The "TESTNAME:weight" line should appear 
at LOGLEVEL MID or higher for every E-mail processed by Declude JunkMail.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to