I think I was seeing n9 in the log...which, now, I'm inferring was maybe negative nine due to my having a 9 at the end of the line?
At this point, though, I'm really thinking that it was adding ipnotinmx and nolegitcontent as bad cholesterol instead of good cholesterol... Meaning, they were adding to the weight rather than counter-weighting. I come to this conclusion because if I add up the weights of the tests failed for messages that got caught that shouldn't have the weight only adds up if these tests are being added up as positive integers. Thanks! Katie LaSalle-Lowery Centric Internet Services 1410 Reserve St. Missoula, MT 59801 Local Phone 549-3337 ext. 21 Toll Free (888)593-2776 ext. 21 Fax (406)721-3438 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, December 13, 2004 2:49 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Upgraded Declude Thurs night -- since then getting false positives on MessageSniffer >I have commented out sniffer, ipnotinmx and nolegitcontent as those are >my suspects... Everything else is how the configuration was when I >became aware I had problems. > >#IPNOTINMX ipnotinmx x x 0 -3 >#NOLEGITCONTENT nolegitcontent x x 0 -5 >#SNIFFER external nonzero >"C:\IMail\Declude\Sniffer\wuckd6ww.exe y5abucz7zhoqeg0o" 0 9 These are all set up properly. Are you seeing "SNIFFER" in the X-Spam-Tests-Failed: header when you think that the E-mail didn't fail Message Sniffer but apparently did? If not, what makes you think that the E-mail is failing the Message Sniffer test? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. ---- This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
