If you are using Spamchk, you can use an external file there. That is what I do with my body URL filter. It is much quicker to parse from Spamchk than as a filter in Declude.
John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Scott Fisher > Sent: Wednesday, April 21, 2004 1:31 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Obvious, but it was new for me > > My Body URL observations: > > I've noticed that using SURBL filter has dramatically cut down on the hits of my 5 URL > Body filters. My five filters are for .biz, .info, .com, .net and other, it's just easier for > me to maintain them that way. > > So I've moved the SURBL filter higher in my list of test and the bodyURL's are some of > the last tests run. > > If you run SPAMCHK, it logs out all of the URL's it finds. > > Scott Fisher > Director of IT > Farm Progress Companies > > >>> [EMAIL PROTECTED] 04/21/04 02:52PM >>> > I just saved some processing power.. > > One of my most important text filters is the BODY search for URL stuff. But > it's quite big. To keep my loglevels in check, I use LOGLEVEL MID, which > doesn't log the individual lines triggered. But whether I use MID or HIGH, > the line numbers are only significant if I'm not changing the order, right? > So I bottom-post my new filter entries. > > Back in December, I cut the big file in half, then whenever the > short-circuit logic was added, I placed the bottom-most text first in my > global.cfg and that helped too. > > I just gave up on bottom-posting, and LIFO reversed the files. I've > definitely noticed that our average CPU usage during our peak periods has > gone down. > > Which tells me that I'll probably want to keep that file smaller and go back > to bottom-posting and keep logically named sets of files... > > The main file is about 1000 entries, all BODY searches. > > (And no, I'm not going to post it to this list!) > > Andrew 8) > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
