But who wants 800MB to 1GB spam log files? The server is so busy doing declude processes there isn't enough time to run a log analyzer on the local machine. It takes to long to transfer the log file to a different machine.
Robert ----- Original Message ----- From: R. Scott Perry <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 01, 2004 1:39 PM Subject: RE: [Declude.JunkMail] Declude version 1.79 and Delog > > > Thanks, we have been running along with MID since the beginning, > >all along, upgrading the interim releases. We just this week needed to > >know which line it failed on in one of our filter files. This is what > >we get now in our log. I will up to HIGH this week. Thanks, > > > >Qff4f4d2301429a89 BADHEADERS:8 SPAMHEADERS:8 FILTER-SUBJECT:9 > >FILTER-BODYURL:20 . Total weight = 45. > >06/01/2004 00:00:24 Qff4f4d2301429a89 Subject: Indebted to your > >creditors? We can help > >06/01/2004 00:00:24 Qff4f4d2301429a89 From: [EMAIL PROTECTED] > >To: XXXXXXX IP: 206.173.149.243 ID: > >06/01/2004 00:00:24 Qff4f4d2301429a89 Tests failed [weight=45]: > >BADHEADERS=WARN IPNOTINMX=IGNORE SPAMHEADERS=WARN SNIFFER-NOTFND=IGNORE > >WEIGHT10=WARN WEIGHT20=SUBJECT FILTER-SUBJECT=IGNORE > >FILTER-BODYURL=IGNORE > > The "Msg failed" lines at LOGLEVEL HIGH include the line in the filter that > failed. So when you move to LOGLEVEL HIGH, it will have the information > you desire. > > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
