Hello,
Several months ago I got SPAMC32 working with my spamd server and reporting
scores to Declude properly (as far as I know).  With Sandy's help I set it
up to use the following method:

SA1             external 1
"c:\imail\declude\filters\spamc32\spamc32.exe -d <spamd IP> -u spamd -p 783
-cw %WEIGHT% -sw 10 -y -e -et 10 -f" 20 0
SA2             external 2
"c:\imail\declude\filters\spamc32\spamc32.exe -d <spamd IP> -u spamd -p 783
-cw %WEIGHT% -sw 10 -y -e -et 10 -f" 30 0
...
SA10            external 10
"c:\imail\declude\filters\spamc32\spamc32.exe -d <spamd IP> -u spamd -p 783
-cw %WEIGHT% -sw 10 -y -e -et 10 -f" 170 0

While I can't *guarantee* that it was working right with higher than 10
returns from spamd, here is what I see now.

Last week I made a change in order to allow more granular fine-tuning of
Declude scores: I increased every score by a factor of 10.  After some
miscues with not changing some combo filter values, etc. and adding several
combos some stuff is getting through that definitely should not.  What I
think is happening is that (at the very least) spamd scores higher than 10
are not being scored.  In looking at my dec logs and spamd maillog it
*appears* that stuff that rounds to 10 (is this 9.51 to 10.50??) may be
matching the test and adding 170 to the score, but stuff that scores higher
than that is not scoring at all in Declude.  I don't believe that my change
to scoring would impact the above SPAMC32 lines, would it?  My understanding
is that SA10 is looking at rounded scores from spamd and if it sees a score
of over 10 (I see a lot in maillog in the 20s, 30s, etc.) it should score
170.  However I don't see nearly that many failing the SA10 test as I'd
expect.  Consequently users are receiving many more emails than they should,
that would score enough with SA's help to get held.

Maybe I'm just too tired today and am missing something.  I also recently
updated to declude 3.05 (was at 1.81!)  I can provide more config details if
needed.


Thanks,
Geoff

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to