Scott,
That's odd and it points to a problem somewhere. The ALL tests should hit every LAST hit and then some extra. I generally see about 1% to 2% more for the ALL tests across the board (not percentage points, but a percentage difference). Here are some examples from yesterday's stats:
SPAMCOP(ALL)............30,250.......56.71% SPAMCOP(LAST)...........29,926.......56.11% XBL(ALL)................22,201.......41.62% XBL(LAST)...............21,891.......41.04% DSBL(ALL)...............20,074.......37.64% DSBL(LAST)..............19,771.......37.07% NJABL-PROXIES(ALL).......6,610.......12.39% NJABL-PROXIES(LAST)......6,459.......12.11% SORBS-SOCKS(ALL).........4,922........9.23% SORBS-SOCKS(LAST)........4,816........9.03%
Maybe you could post your config lines for examples where you saw LAST score higher than ALL just to make sure. I suppose that other factors like IPBYPASS or some some whitelist settings in combination with how you get your stats could have an effect, but that would be a config/method that I am unfamiliar with.
Matt
Scott Fisher wrote:
-Matt,
I've converted my -DYNA tests to -LAST and have observed an unexpected result. Before the -DYNA tests totals would usually be a few less than the -ALL test. Now the -LAST test totals are usually a few more than the -ALL tests.
I can account some of these for having my domain name used as the from address. But this doesn't account for all of them.
Scott Fisher Director of IT Farm Progress Companies
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
