lets see what happens with today's results. If you want the log it'll be big (150-200 MB), I log at high.
<<< [EMAIL PROTECTED] 6/ 8 5:21p >>> Scott, Send me your log off-list and I'll parse it with DLAnalyzer so that we are both seeing data generated from the same app. Seems like a logical place to start. Matt Scott Fisher wrote: >Stats: > > AHBL-PROXIES-ALL 901 > AHBL-PROXIES-LAST 908 last higher > BLITZEDALL-ALL 624 This is what I'm used to. > BLITZEDALL-LAST 602 > CBL-ALL 4000 > CBL-LAST 4017 last higher > DSBL-ALL 3607 > DSBL-LAST 3628 last higher > ORDB-ALL 29 what I'm used to > ORDB-LAST 28 > SPAMCOP-ALL 4744 > SPAMCOP-LAST 4784 last higher > >global.cfg lines: >AHBL-PROXIES-LAST dnsbl %IP4R%.dnsbl.ahbl.org 127.0.0.3 0 0 >AHBL-PROXIES-ALL ip4r dnsbl.ahbl.org 127.0.0.3 0 0 >CBL-LAST dnsbl %IP4R%.cbl.abuseat.org 127.0.0.2 50 0 >CBL-ALL ip4r cbl.abuseat.org 127.0.0.2 18 0 >DSBL-LAST dnsbl %IP4R%.list.dsbl.org 127.0.0.2 0 0 >DSBL-ALL ip4r list.dsbl.org 127.0.0.2 0 0 >ORDB-LAST dnsbl %IP4R%.relays.ordb.org 127.0.0.2 0 0 >ORDB-ALL ip4r relays.ordb.org 127.0.0.2 0 0 >SPAMCOP-LAST dnsbl %IP4R%.bl.spamcop.net 127.0.0.2 60 0 >SPAMCOP-ALL ip4r bl.spamcop.net 127.0.0.2 30 0 > >IPBYPASS ... none >Whitelisting ... only true whitelisted items are my internal mailserver (all e-mail >forwarded past Imail) > >Unfortuantely I didn't change my ACTIONS from the -DYNA to the -LAST, so I don't have >logs to fall back on (yet). > >Scott Fisher >Director of IT >Farm Progress Companies > > > >>>>[EMAIL PROTECTED] 06/08/04 03:26PM >>> >>>> >>>> >Scott, > >That's odd and it points to a problem somewhere. The ALL tests should >hit every LAST hit and then some extra. I generally see about 1% to 2% >more for the ALL tests across the board (not percentage points, but a >percentage difference). Here are some examples from yesterday's stats: > >SPAMCOP(ALL)............30,250.......56.71% >SPAMCOP(LAST)...........29,926.......56.11% >XBL(ALL)................22,201.......41.62% >XBL(LAST)...............21,891.......41.04% >DSBL(ALL)...............20,074.......37.64% >DSBL(LAST)..............19,771.......37.07% >NJABL-PROXIES(ALL).......6,610.......12.39% >NJABL-PROXIES(LAST)......6,459.......12.11% >SORBS-SOCKS(ALL).........4,922........9.23% >SORBS-SOCKS(LAST)........4,816........9.03% > >Maybe you could post your config lines for examples where you saw LAST >score higher than ALL just to make sure. I suppose that other factors >like IPBYPASS or some some whitelist settings in combination with how >you get your stats could have an effect, but that would be a >config/method that I am unfamiliar with. > >Matt > > > >Scott Fisher wrote: > > > >>-Matt, >> >>I've converted my -DYNA tests to -LAST and have observed an unexpected result. >>Before the -DYNA tests totals would usually be a few less than the -ALL test. >>Now the -LAST test totals are usually a few more than the -ALL tests. >> >>I can account some of these for having my domain name used as the from address. But >>this doesn't account for all of them. >> >> >> >> >> >>Scott Fisher >>Director of IT >>Farm Progress Companies >> >>--- >>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] >> >>--- >>This E-mail came from the Declude.JunkMail mailing list. To >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>type "unsubscribe Declude.JunkMail". The archives can be found >>at http://www.mail-archive.com. >> >> >> >> >> >> > > > -- ==== --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
