Scott,
Sorry, it wasn't the WARN action, it's coming from the XOUTHEADER (gatewayed client in this example):
XOUTHEADER X-MailPure: Spam Score: %WEIGHT% - or - XINHEADER X-MailPure: Spam Score: %WEIGHT%
1.79i6 is the version that I am running presently. Following are some other examples, with the first appearance in my inbox being April 12th which happens to be less than a week after you added the weight variable to the external tests, and just after you resolved the issue where the weights were appearing about 500 points above what they really were (only in the %WEIGHT% variable). I don't believe this has affected how Declude handles the E-mail, just the %WEIGHT% variable itself. It appears that the issue with the -100 only happens when the total score is zero. I believe this is being passed off in the variable when used for external tests, but I haven't verified that yet.
Thanks,
Matt
Received: from mx2.mailpure.com [63.170.56.5] by mx1.mailpure.com with ESMTP
(SMTPD32-8.05) id A5496AC01E4; Mon, 12 Apr 2004 21:41:29 -0400
Received: from mail.pluscentury.biz ([64.205.141.39]) by mx2.mailpure.com with Microsoft SMTPSVC(6.0.3790.0);
Mon, 12 Apr 2004 21:40:16 -0400
Received: (qmail 31553 invoked from network); 13 Apr 2004 13:52:18 -0000
Received: from mail.pluscentury.biz (HELO localhost.localdomain) (64.205.141.39)
by mail.pluscentury.biz with SMTP; 13 Apr 2004 13:52:18 -0000
User-Agent: KMail/1.4.3
From: "Mackenna" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: I bet we can hit it off
Reply-To: [EMAIL PROTECTED]
Precedence: first-class
Mime-Version: 1.0
X-cid: 190
X-eid: 434378
X-lid: 143
Bounces-to: [EMAIL PROTECTED]
Content-Type: multipart/alternative;boundary="MuLtIpArT_BoUnDaRy"
Return-Path: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 13 Apr 2004 01:40:17.0371 (UTC) FILETIME=[462032B0:01C420F8]
Date: 12 Apr 2004 21:40:17 -0400
X-MailPure: ================================================================
X-MailPure: LEGITCONTENT: Passed, legitimate content detected (weight -2).
X-MailPure: MXBAIT: Message failed MXBAIT test (line 3, weight 1).
X-MailPure: SPAMMYURL: Message failed SPAMMYURL test (line 10, weight 1).
X-MailPure: ================================================================
X-MailPure: Spam Score: -100
X-MailPure: Scan Time: 21:41:38 on 04/12/2004
X-MailPure: Spool File: D454906ac01e4fad2.SMD
X-MailPure: Server Name: mail.pluscentury.biz
X-MailPure: SMTP Sender: [EMAIL PROTECTED]
X-MailPure: Received From: mail.pluscentury.biz [64.205.141.39]
X-MailPure: Country Chain: UNITED STATES->destination
X-MailPure: ================================================================
X-MailPure: Spam and virus blocking services provided by MailPure.com
X-MailPure: ================================================================
Received: from lakermmtao02.cox.net [68.230.240.37] by mx1.mailpure.com with ESMTP
(SMTPD32-8.05) id A7E6A008A; Tue, 13 Apr 2004 21:46:14 -0400
Received: from fairview ([68.102.33.6]) by lakermmtao02.cox.net
(InterMail vM.6.01.03.02 201-2131-111-104-20040324) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Tue, 13 Apr 2004 21:45:56 -0400
Return-Receipt-To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
To: "Matt Bramble" <[EMAIL PROTECTED]>
Subject: e-mail account
Date: Tue, 13 Apr 2004 20:56:11 -0500
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01C42199.C15A9AF0"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-MailPure: ================================================================
X-MailPure: ================================================================
X-MailPure: Spam Score: -100
X-MailPure: Scan Time: 21:46:48 on 04/13/2004
X-MailPure: Spool File: D97e6000a008a0bf7.SMD
X-MailPure: Server Name: lakermmtao02.cox.net
X-MailPure: SMTP Sender: [EMAIL PROTECTED]
X-MailPure: Received From: lakermmtao02.cox.net [68.230.240.37]
X-MailPure: Country Chain: UNITED STATES->destination
X-MailPure: ================================================================
X-MailPure: Spam and virus blocking services provided by MailPure.com
X-MailPure: ================================================================
Received: from qwertyx1.qwertyx.net [12.107.136.168] by mx1.mailpure.com
(SMTPD32-8.05) id AC456C7C00A0; Mon, 19 Apr 2004 21:26:29 -0400
Received: by qwertyx1.qwertyx.net (Postfix, from userid 515)
id 15B829286D; Mon, 19 Apr 2004 21:26:30 -0400 (EDT)
Received: from [192.168.237.100] (dwolk-home [68.236.149.197])
by qwertyx1.qwertyx.net (Postfix) with ESMTP id 8A1839284F
for <[EMAIL PROTECTED]>; Mon, 19 Apr 2004 21:26:29 -0400 (EDT)
Subject: Re: DNS errors on my server
From: [EMAIL PROTECTED]
To: Matthew Bramble <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-M5/UKnZZDGcNzMQlhUAq"
Organization: Binara, Inc.
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.6-1mdk
Date: Mon, 19 Apr 2004 21:26:28 -0400
X-Spam-Status: No, hits=-1.5 required=5.0
tests=IN_REP_TO,MIME_EXCESSIVE_QP,NOSPAM_INC,PGP_SIGNATURE_2,
QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_01_02
version=2.44
X-Spam-Level:
X-MailPure: ================================================================
X-MailPure: FIVETEN-SPAM: Failed, listed in blackholes.five-ten-sg.com (weight 2).
X-MailPure: LEGITCONTENT: Passed, legitimate content detected (weight -2).
X-MailPure: ================================================================
X-MailPure: Spam Score: -100
X-MailPure: Scan Time: 21:26:34 on 04/19/2004
X-MailPure: Spool File: D7c456c7c00a0c6ed.SMD
X-MailPure: Server Name: qwertyx1.qwertyx.net
X-MailPure: SMTP Sender: [EMAIL PROTECTED]
X-MailPure: Received From: www.binara.com [12.107.136.168]
X-MailPure: Country Chain: UNITED STATES->destination
X-MailPure: ================================================================
X-MailPure: Spam and virus blocking services provided by MailPure.com
X-MailPure: ================================================================
R. Scott Perry wrote:
This may be very minor and possibly just cosmetic, I have found that some messages will have a %WEIGHT% variable returned for a WARN action that is -100 when such a score is impossible on our system. The example below is from a message that scored 0 in the logs (seemingly correct), but shows differently in the headers. I'm using 1.79i6 currently and am not aware of any ill effects as a result.
X-MailPure: Spam Score: -100
How is the WARN action set up? Which version of Declude are you running?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
