Stats:

     AHBL-PROXIES-ALL            901
     AHBL-PROXIES-LAST           908   last higher
     BLITZEDALL-ALL              624    This is what I'm used to.
     BLITZEDALL-LAST             602 
     CBL-ALL                    4000
     CBL-LAST                   4017     last higher
     DSBL-ALL                   3607
     DSBL-LAST                  3628    last higher
     ORDB-ALL                     29     what I'm used to
   ORDB-LAST                    28     
     SPAMCOP-ALL                4744       
     SPAMCOP-LAST               4784    last higher

global.cfg lines:
AHBL-PROXIES-LAST       dnsbl   %IP4R%.dnsbl.ahbl.org   127.0.0.3       0       0
AHBL-PROXIES-ALL        ip4r    dnsbl.ahbl.org          127.0.0.3       0       0
CBL-LAST                dnsbl   %IP4R%.cbl.abuseat.org          127.0.0.2   50  0
CBL-ALL         ip4r    cbl.abuseat.org         127.0.0.2  18   0
DSBL-LAST       dnsbl   %IP4R%.list.dsbl.org    127.0.0.2  0    0
DSBL-ALL                ip4r    list.dsbl.org           127.0.0.2  0    0
ORDB-LAST       dnsbl   %IP4R%.relays.ordb.org  127.0.0.2       0       0
ORDB-ALL        ip4r    relays.ordb.org         127.0.0.2       0       0
SPAMCOP-LAST    dnsbl   %IP4R%.bl.spamcop.net   127.0.0.2       60      0
SPAMCOP-ALL     ip4r    bl.spamcop.net          127.0.0.2       30      0

IPBYPASS  ... none
Whitelisting ... only true whitelisted items are my internal mailserver (all e-mail 
forwarded past Imail)

Unfortuantely I didn't change my ACTIONS from the -DYNA to the -LAST, so I don't have 
logs to fall back on (yet).

Scott Fisher
Director of IT
Farm Progress Companies

>>> [EMAIL PROTECTED] 06/08/04 03:26PM >>>
Scott,

That's odd and it points to a problem somewhere.  The ALL tests should 
hit every LAST hit and then some extra.  I generally see about 1% to 2% 
more for the ALL tests across the board (not percentage points, but a 
percentage difference).  Here are some examples from yesterday's stats:

SPAMCOP(ALL)............30,250.......56.71%
SPAMCOP(LAST)...........29,926.......56.11%
XBL(ALL)................22,201.......41.62%
XBL(LAST)...............21,891.......41.04%
DSBL(ALL)...............20,074.......37.64%
DSBL(LAST)..............19,771.......37.07%
NJABL-PROXIES(ALL).......6,610.......12.39%
NJABL-PROXIES(LAST)......6,459.......12.11%
SORBS-SOCKS(ALL).........4,922........9.23%
SORBS-SOCKS(LAST)........4,816........9.03%

Maybe you could post your config lines for examples where you saw LAST 
score higher than ALL just to make sure.  I suppose that other factors 
like IPBYPASS or some some whitelist settings in combination with how 
you get your stats could have an effect, but that would be a 
config/method that I am unfamiliar with.

Matt



Scott Fisher wrote:

>-Matt,
>
>I've converted my -DYNA tests to -LAST and have observed an unexpected result.
>Before the -DYNA tests totals would usually be a few less than the -ALL test.
>Now the -LAST test totals are usually a few more than the -ALL tests.
>
>I can account some of these for having my domain name used as the from address. But 
>this doesn't account for all of them.
>
>
>
> 
>
>Scott Fisher
>Director of IT
>Farm Progress Companies
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>
>
>  
>

-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/ 
=====================================================


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to