Markus:

What are the following IP4R tests, I could not cross reference them with the
Declude Manual or the list at http://www.declude.com/Articles.asp?ID=97

TESTSFAILED     0       CONTAINS        BHOLE-CN-KR
TESTSFAILED     0       CONTAINS        BHOLE-JAPAN
TESTSFAILED     0       CONTAINS        BHOLE-KOREA
TESTSFAILED     0       CONTAINS        KOREASPAM


Thanks for your help.

Chuck Schick
Warp 8, Inc.
303-421-5140
www.warp8.com

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler
> Sent: Wednesday, August 11, 2004 3:15 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Spamtest quality report
>
>
>
> > This is really helpful.  Could you explain some of your combo
> > tests?  I did not know that declude could do combo tests.
>
> You can use combo-test with TESTSFAILED lines in Declude Junkmail
> Pro filter
> files
>
> For example
>
> You've running several IP4R tests
>
> SPAMCOP, FIVETEN, CBL, SBL, ....
>
> Now set up a test COMBO-IP4R with the following filterfile containing only
> your reliable IP4R-tests
>
> ######################################################
> TESTSFAILED   0       CONTAINS        AHBLDOMAINS
> TESTSFAILED   0       CONTAINS        AHBLPROXIES
> TESTSFAILED   0       CONTAINS        AHBLSOURCES
> TESTSFAILED   0       CONTAINS        BHOLE-CN-KR
> TESTSFAILED   0       CONTAINS        BHOLE-JAPAN
> TESTSFAILED   0       CONTAINS        BHOLE-KOREA
> TESTSFAILED   0       CONTAINS        BLITZEDALL
> TESTSFAILED   0       CONTAINS        ORDB
> TESTSFAILED   0       CONTAINS        CBL
> TESTSFAILED   0       CONTAINS        DSBL
> TESTSFAILED   0       CONTAINS        DSN
> TESTSFAILED   0       CONTAINS        FABEL
> TESTSFAILED   0       CONTAINS        KOREASPAM
> TESTSFAILED   0       CONTAINS        MAILPOLICE-BULK
> TESTSFAILED   0       CONTAINS        NJABLPROXIES
> TESTSFAILED   0       CONTAINS        SBL
> TESTSFAILED   0       CONTAINS        SORBS-HTTP
> TESTSFAILED   0       CONTAINS        SORBS-MISC
> TESTSFAILED   0       CONTAINS        SORBS-SOCKS
> TESTSFAILED   0       CONTAINS        SPAMBAG
> TESTSFAILED   0       CONTAINS        SPAMCOP
> TESTSFAILED   0       CONTAINS        SPAMHAUS
> TESTSFAILED   0       CONTAINS        XBL-DYNA
> ######################################################
>
> This test will have no effect on your weighting system but it's
> the base for
> the following COMBO-Tests. COMBO-IP4R will fail if at least one of the
> listed IP4R-Tests has failed before.
>
> Now set up one test for each other test you want to combine with the
> IP4R-tests
>
> For example COMBO-IP4R-SNIFFER with another filterfile
>
> ######################################################
> TESTSFAILED END NOTCONTAINS COMBO-IP4R
> TESTSFAILED 30 CONTAINS       SNIFFER
> ######################################################
>
> So what happens
> COMBO-IP4R-SNIFFER will terminate wtihout result if COMBO-IP4R
> hasn't failed
> before
> Otherwise it will add 30 points if SNIFFER has identified this message as
> spam.
>
> You can combine several other tests with the group of IP4R-tests.
>
> Most of you should forget to use the COMBO-IP4R-COUNTRY-US filter because
> it's working good only for european mailservers. Maybe you can use a
> COMBO-IP4R-COUNTRY-EU filter file.
>
> Unfortunately you can't use this COMBO-Test with SPAMCHK because it can
> return also a negative weight if a message seems legit. If the result is
> negative it's not a good idea to combine it with another group of
> tests and
> add weight if the second group indicates spam. A feature request
> to separate
> the "weight" test in "weight+" and "weight-" should be somewhere deep in
> Scott's todo-list  ;-)
>
> Markus
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to