Win2003 allows you to connect to the console session so you can always leave outlook express open and running so your hold mailboxes dont get over filled. If remote management isnt a requirement then the win2003 remote console doesnt matter...
On your filtering server, create a mailbox for each test that holds mail, create accounts and message rules to download and sort the mail by test.
As you review the mail you can determine why a false positive occured and then adjust your filtering accordingly. Once you are certain a test is not generating false positives you can safely switch it to delete mail.
My false positive rate is near 1 in 500k-700k we do about 115K messages a day, we hold over 100K of those as spam. I am constantly readjusting for better catch rate and fewer false positives
This is how I do it.
Rick Davidson National Systems Manager North American Title Group
-
----- Original Message ----- From: "Chris Ulrich" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 25, 2004 10:37 AM
Subject: [Declude.JunkMail] Best Practices for handing legit email flagged as spam?
Hi all. We've been struggling a bit with this issue. We have a variety of tests in place, and basically have just changed our settings to:
WEIGHT10 WARN WEIGHT20 BOUNCEONLYIFYOUMUST WEIGHT40 DELETE
The hope is that it will bounce some of the false positives back to the senders so we don't get complaints from people that they are not receiving their emails (which previously were getting deleted) and that if it is "so offending" (it hits 40) that we delete it.
I know there is a HOLD option where we could review it, but:
1. How time consuming is it to go in and review these messages? Do you waste a lot of time doing it?
2. How exactly do you review these and, if it looks legit, flag it as OK to go? Are there any tools where you can basically browse through the subjects, senders, etc., like you would with Eudora or Outlook? Or do you have to manually look at each?
Any thoughts would be appreciated!
Thanks
Chris
--- [This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
