I've noticed the tests HOUR and IPNOTINMX are preceded by an n in mylogs, such as nHOUR and nIPNOTINMX.
That means that the a weight was applied because an E-mail did *not* fail the test.
HOUR hour 6 20 0 1 IPNOTINMX ipnotinmx x x 0 -3
These tell Declude JunkMail to add 1 point to the weight for E-mails that do not fail the HOUR test, and subtract 3 points for E-mails that do not fail the IPNOTINMX test.
The IPNOTINMX test is designed to work that way, but for the HOUR test, you most likely want:
HOUR hour 6 20 -1 0
This will subtract 1 point from the weight of E-mail that comes in between 6AM and 8:59PM.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
