RE: [Declude.JunkMail] Help with Configuration

2006-11-08 Thread Todd Richards
Which is what we want to do.  I changed my configs and instead of routing to
a mailbox, am holding.  The only real reason I wanted to separate was
because searhing through a mailbox was a PIA.  I downloaded the trial of
fpReview as suggested by John and will try that (so far it looks like a
great utility!).

Thanks!

Todd
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Tuesday, November 07, 2006 6:19 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Help with Configuration

Unless, as some prefer, you want to mark the subject in addition to holding.
In that case, the old weight statements fit perfectly instead of the newer
weightrange.

Darin.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Bilbee
Sent: Tuesday, November 07, 2006 2:58 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Help with Configuration

Look at using weightrange instead of weight to define your weighted tests.
It simplifies the weighting and makes it clear on what will happen to the
message.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Todd Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration

 Hey Everyone -

 We are just getting things tuned to the point where we are truly happy 
 with the results we are seeing.  What I am trying to do now is help 
 myself monitor the close calls.  I was sending everything between 
 caught
 and
 delete to a spam mailbox so that I could check for any false 
 positives.
 However, with my new success, that is getting out of hand.  So what I 
 would like to do is set up a new account to help with the overflow and 
 allow me to really monitor the close ones.

 Here is my weights in my global.cfg file:

 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE

 Here is the corresponding actions that I have in my $default$.junkmail
 file:

 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE

 My plan with the above is to send everything with a weight of 19-31 to 
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]
 What I am hoping to accomplish by this is to keep a closer eye on 
 those email that might accidentally be caught.  Right now, 95% of the 
 messages are ending up in the [EMAIL PROTECTED] mailbox even if they 
 are above the WEIGHT32 (which should then go to spam2).  However, it 
 does appear that everything over 60 is being deleted.  I've checked 
 all of the config files to make sure I have things set up right, and 
 it does appear that way.  Am I missing something, or is there 
 something diferent that I should be doing?

 Thanks!

 Todd







 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread John T \(Lists\)
What I do is send those grey ones to HOLD and then use fpReview to directly
view them and take appropriate action. Much faster and easier than using a
mailbox.

John T
eServices For You

Life is a succession of lessons which must be lived to be understood.
Ralph Waldo Emerson (1802-1882)



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd
 Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
 
 We are just getting things tuned to the point where we are truly happy
with
 the results we are seeing.  What I am trying to do now is help myself
 monitor the close calls.  I was sending everything between caught and
 delete to a spam mailbox so that I could check for any false positives.
 However, with my new success, that is getting out of hand.  So what I
would
 like to do is set up a new account to help with the overflow and allow me
to
 really monitor the close ones.
 
 Here is my weights in my global.cfg file:
 
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
 
 Here is the corresponding actions that I have in my $default$.junkmail
file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
 
 My plan with the above is to send everything with a weight of 19-31 to
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  What I
 am
 hoping to accomplish by this is to keep a closer eye on those email that
 might accidentally be caught.  Right now, 95% of the messages are ending
up
 in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32 (which
 should then go to spam2).  However, it does appear that everything over
60
 is being deleted.  I've checked all of the config files to make sure I
have
 things set up right, and it does appear that way.  Am I missing something,
 or is there something diferent that I should be doing?
 
 Thanks!
 
 Todd
 
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Kevin Bilbee
Look at using weightrange instead of weight to define your weighted tests. It 
simplifies the weighting and makes it clear on what will happen to the message.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Todd Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
 
 We are just getting things tuned to the point where we are truly happy
 with
 the results we are seeing.  What I am trying to do now is help myself
 monitor the close calls.  I was sending everything between caught
 and
 delete to a spam mailbox so that I could check for any false
 positives.
 However, with my new success, that is getting out of hand.  So what I
 would
 like to do is set up a new account to help with the overflow and allow
 me to
 really monitor the close ones.
 
 Here is my weights in my global.cfg file:
 
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
 
 Here is the corresponding actions that I have in my $default$.junkmail
 file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
 
 My plan with the above is to send everything with a weight of 19-31 to
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  What
 I am
 hoping to accomplish by this is to keep a closer eye on those email
 that
 might accidentally be caught.  Right now, 95% of the messages are
 ending up
 in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32
 (which
 should then go to spam2).  However, it does appear that everything
 over 60
 is being deleted.  I've checked all of the config files to make sure I
 have
 things set up right, and it does appear that way.  Am I missing
 something,
 or is there something diferent that I should be doing?
 
 Thanks!
 
 Todd
 
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



re: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Gary Steiner
Is it because when it reaches WEIGHT19 and does the ROUTETO [EMAIL PROTECTED], 
the message is delivered?  Then when it tries to perform the action of WEIGHT32 
the message is already gone?

Does Declude allow for multiple instances of the same action where subsequent 
actions are performed, or does it perform the action of the same type that 
occurs first?  Is there a precedence on actions of the same type or not?  The 
manual describes precedence for actions of different type (HOLD over WARN for 
example) but what about actions of the same type (one ROUTETO versus another 
ROUTETO)?

Gary


 Original Message 
 From: Todd Richards [EMAIL PROTECTED]
 Sent: Tuesday, November 07, 2006 2:47 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
  
 We are just getting things tuned to the point where we are truly happy with
 the results we are seeing.  What I am trying to do now is help myself
 monitor the close calls.  I was sending everything between caught and
 delete to a spam mailbox so that I could check for any false positives.
 However, with my new success, that is getting out of hand.  So what I would
 like to do is set up a new account to help with the overflow and allow me to
 really monitor the close ones.
 
 Here is my weights in my global.cfg file:
  
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
  
 Here is the corresponding actions that I have in my $default$.junkmail file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
  
 My plan with the above is to send everything with a weight of 19-31 to
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  What I am
 hoping to accomplish by this is to keep a closer eye on those email that
 might accidentally be caught.  Right now, 95% of the messages are ending up
 in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32 (which
 should then go to spam2).  However, it does appear that everything over 60
 is being deleted.  I've checked all of the config files to make sure I have
 things set up right, and it does appear that way.  Am I missing something,
 or is there something diferent that I should be doing?
  
 Thanks!
  
 Todd
  
  
  
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com. 






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Todd Richards
That's what I was wondering too, but then I wondered why it would make it to
the WEIGHT60 and get deleted?   

I think what Kevin suggested with the weightranges would probably work.

Todd


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, November 07, 2006 3:34 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] Help with Configuration

Is it because when it reaches WEIGHT19 and does the ROUTETO
[EMAIL PROTECTED], the message is delivered?  Then when it tries to perform
the action of WEIGHT32 the message is already gone?

Does Declude allow for multiple instances of the same action where
subsequent actions are performed, or does it perform the action of the same
type that occurs first?  Is there a precedence on actions of the same type
or not?  The manual describes precedence for actions of different type (HOLD
over WARN for example) but what about actions of the same type (one ROUTETO
versus another ROUTETO)?

Gary


 Original Message 
 From: Todd Richards [EMAIL PROTECTED]
 Sent: Tuesday, November 07, 2006 2:47 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
  
 We are just getting things tuned to the point where we are truly happy 
 with the results we are seeing.  What I am trying to do now is help 
 myself monitor the close calls.  I was sending everything between 
 caught and delete to a spam mailbox so that I could check for any
false positives.
 However, with my new success, that is getting out of hand.  So what I 
 would like to do is set up a new account to help with the overflow and 
 allow me to really monitor the close ones.
 
 Here is my weights in my global.cfg file:
  
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
  
 Here is the corresponding actions that I have in my $default$.junkmail
file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
  
 My plan with the above is to send everything with a weight of 19-31 to 
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  
 What I am hoping to accomplish by this is to keep a closer eye on 
 those email that might accidentally be caught.  Right now, 95% of the 
 messages are ending up in the [EMAIL PROTECTED] mailbox even if they 
 are above the WEIGHT32 (which should then go to spam2).  However, it 
 does appear that everything over 60 is being deleted.  I've checked 
 all of the config files to make sure I have things set up right, and 
 it does appear that way.  Am I missing something, or is there something
diferent that I should be doing?
  
 Thanks!
  
 Todd
  
  
  
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Todd Richards
Thanks John.  I will look at fpReview.  Yeah, browsing the mailbox is a bit
slow...  :(

Todd 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Tuesday, November 07, 2006 2:44 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Help with Configuration

What I do is send those grey ones to HOLD and then use fpReview to directly
view them and take appropriate action. Much faster and easier than using a
mailbox.

John T
eServices For You

Life is a succession of lessons which must be lived to be understood.
Ralph Waldo Emerson (1802-1882)



 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Todd Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
 
 We are just getting things tuned to the point where we are truly happy
with
 the results we are seeing.  What I am trying to do now is help myself 
 monitor the close calls.  I was sending everything between caught 
 and delete to a spam mailbox so that I could check for any false
positives.
 However, with my new success, that is getting out of hand.  So what I
would
 like to do is set up a new account to help with the overflow and allow 
 me
to
 really monitor the close ones.
 
 Here is my weights in my global.cfg file:
 
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
 
 Here is the corresponding actions that I have in my $default$.junkmail
file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
 
 My plan with the above is to send everything with a weight of 19-31 to 
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  
 What I am hoping to accomplish by this is to keep a closer eye on 
 those email that might accidentally be caught.  Right now, 95% of the 
 messages are ending
up
 in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32 
 (which should then go to spam2).  However, it does appear that 
 everything over
60
 is being deleted.  I've checked all of the config files to make sure I
have
 things set up right, and it does appear that way.  Am I missing 
 something, or is there something diferent that I should be doing?
 
 Thanks!
 
 Todd
 
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Todd Richards
Thanks Kevin.  This is what I was wondering about, so I will look into how
to implement.

Todd
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Bilbee
Sent: Tuesday, November 07, 2006 2:58 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Help with Configuration

Look at using weightrange instead of weight to define your weighted tests.
It simplifies the weighting and makes it clear on what will happen to the
message.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
 Todd Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration
 
 Hey Everyone -
 
 We are just getting things tuned to the point where we are truly happy 
 with the results we are seeing.  What I am trying to do now is help 
 myself monitor the close calls.  I was sending everything between 
 caught
 and
 delete to a spam mailbox so that I could check for any false 
 positives.
 However, with my new success, that is getting out of hand.  So what I 
 would like to do is set up a new account to help with the overflow and 
 allow me to really monitor the close ones.
 
 Here is my weights in my global.cfg file:
 
 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE
 
 Here is the corresponding actions that I have in my $default$.junkmail
 file:
 
 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE
 
 My plan with the above is to send everything with a weight of 19-31 to 
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]  
 What I am hoping to accomplish by this is to keep a closer eye on 
 those email that might accidentally be caught.  Right now, 95% of the 
 messages are ending up in the [EMAIL PROTECTED] mailbox even if they 
 are above the WEIGHT32 (which should then go to spam2).  However, it 
 does appear that everything over 60 is being deleted.  I've checked 
 all of the config files to make sure I have things set up right, and 
 it does appear that way.  Am I missing something, or is there 
 something diferent that I should be doing?
 
 Thanks!
 
 Todd
 
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
 unsubscribe Declude.JunkMail.  The archives can be found at 
 http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Nick Hayer





Todd Richards wrote:

  Thanks Kevin.  This is what I was wondering about, so I will look into how
to implement.
  

something like this:
WEIGHTRANGE.SPAM.LOW  weightrange x x 10 12  
 triggered on a weight of 10 to 12 inclusive
WEIGHTRANGE.SPAM.MID  weightrange x x 13 15
WEIGHTRANGE.SPAM.HIGH  weightrange x x 16 18
WEIGHTRANGE.SPAM.VHIGH  weightrange x x 19 26
etc

and then subject tag on the hits
WEIGHTRANGE.SPAM.LOW SUBJECT [Possible Spam(low)]- 
WEIGHTRANGE.SPAM.MID SUBJECT [Possible Spam(mid)]- 
WEIGHTRANGE.SPAM.HIGH SUBJECT [Possible Spam(high)]- 
WEIGHTRANGE.SPAM.VHIGH SUBJECT [Possible Spam(vhigh)]- 
WEIGHTRANGE.SPAM.XVHIGH SUBJECT [Possible Spam(Xvhigh)]- 
etc

-Nick


  
Todd
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin
Bilbee
Sent: Tuesday, November 07, 2006 2:58 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Help with Configuration

Look at using "weightrange" instead of weight to define your weighted tests.
It simplifies the weighting and makes it clear on what will happen to the
message.


Kevin Bilbee

  
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of 
Todd Richards
Sent: Tuesday, November 07, 2006 11:19 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Help with Configuration

Hey Everyone -

We are just getting things tuned to the point where we are truly happy 
with the results we are seeing.  What I am trying to do now is help 
myself monitor the "close calls".  I was sending everything between 
"caught"
and
"delete" to a spam mailbox so that I could check for any false 
positives.
However, with my new success, that is getting out of hand.  So what I 
would like to do is set up a new account to help with the overflow and 
allow me to really monitor the close ones.

Here is my weights in my global.cfg file:

WEIGHT10  WARN
WEIGHT15  WARN
WEIGHT19  HOLD
WEIGHT32  HOLD
WEIGHT60  DELETE

Here is the corresponding actions that I have in my $default$.junkmail
file:

WEIGHT10  WARN
WEIGHT15  SUBJECT **SPAM**
WEIGHT19  ROUTETO [EMAIL PROTECTED]
WEIGHT19a  SUBJECT [%WEIGHT%]
WEIGHT32  ROUTETO [EMAIL PROTECTED]
WEIGHT32a  SUBJECT [%WEIGHT%]
WEIGHT60  DELETE

My plan with the above is to send everything with a weight of 19-31 to 
[EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED].  
What I am hoping to accomplish by this is to keep a closer eye on 
those email that might accidentally be caught.  Right now, 95% of the 
messages are ending up in the [EMAIL PROTECTED] mailbox even if they 
are above the WEIGHT32 (which should then go to "spam2").  However, it 
does appear that everything over 60 is being deleted.  I've checked 
all of the config files to make sure I have things set up right, and 
it does appear that way.  Am I missing something, or is there 
something diferent that I should be doing?

Thanks!

Todd







---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.

  
  





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



  




---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Kevin Bilbee
This is how we have our server setup

SPAM-LOWweightrange x   x   8   13
SPAM-MEDweightrange x   x   14  24
SPAM-HIGH   weight  x   x   25  0

SPAM-LOWSUBJECT [ SPAM %WEIGHT% ]
SPAM-MEDHOLD
SPAM-HIGH   DELETE


So this way we know exactly what will happen for each weight without question? 
So for your configuration change the weights for your config and change HOLD to 
ROUTETO...

Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Todd Richards
 Sent: Tuesday, November 07, 2006 2:50 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Help with Configuration
 
 Thanks Kevin.  This is what I was wondering about, so I will look into
 how
 to implement.
 
 Todd
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Kevin
 Bilbee
 Sent: Tuesday, November 07, 2006 2:58 PM
 To: declude.junkmail@declude.com
 Subject: RE: [Declude.JunkMail] Help with Configuration
 
 Look at using weightrange instead of weight to define your weighted
 tests.
 It simplifies the weighting and makes it clear on what will happen to
 the
 message.
 
 
 Kevin Bilbee
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
  Todd Richards
  Sent: Tuesday, November 07, 2006 11:19 AM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Help with Configuration
 
  Hey Everyone -
 
  We are just getting things tuned to the point where we are truly
 happy
  with the results we are seeing.  What I am trying to do now is help
  myself monitor the close calls.  I was sending everything between
  caught
  and
  delete to a spam mailbox so that I could check for any false
  positives.
  However, with my new success, that is getting out of hand.  So what I
  would like to do is set up a new account to help with the overflow
 and
  allow me to really monitor the close ones.
 
  Here is my weights in my global.cfg file:
 
  WEIGHT10  WARN
  WEIGHT15  WARN
  WEIGHT19  HOLD
  WEIGHT32  HOLD
  WEIGHT60  DELETE
 
  Here is the corresponding actions that I have in my
 $default$.junkmail
  file:
 
  WEIGHT10  WARN
  WEIGHT15  SUBJECT **SPAM**
  WEIGHT19  ROUTETO [EMAIL PROTECTED]
  WEIGHT19a  SUBJECT [%WEIGHT%]
  WEIGHT32  ROUTETO [EMAIL PROTECTED]
  WEIGHT32a  SUBJECT [%WEIGHT%]
  WEIGHT60  DELETE
 
  My plan with the above is to send everything with a weight of 19-31
 to
  [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]
  What I am hoping to accomplish by this is to keep a closer eye on
  those email that might accidentally be caught.  Right now, 95% of the
  messages are ending up in the [EMAIL PROTECTED] mailbox even if they
  are above the WEIGHT32 (which should then go to spam2).  However,
 it
  does appear that everything over 60 is being deleted.  I've checked
  all of the config files to make sure I have things set up right, and
  it does appear that way.  Am I missing something, or is there
  something diferent that I should be doing?
 
  Thanks!
 
  Todd
 
 
 
 
 
 
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Darin Cox
Unless, as some prefer, you want to mark the subject in addition to holding.
In that case, the old weight statements fit perfectly instead of the newer
weightrange.

Darin.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Bilbee
Sent: Tuesday, November 07, 2006 2:58 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Help with Configuration

Look at using weightrange instead of weight to define your weighted tests.
It simplifies the weighting and makes it clear on what will happen to the
message.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Todd Richards
 Sent: Tuesday, November 07, 2006 11:19 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Help with Configuration

 Hey Everyone -

 We are just getting things tuned to the point where we are truly happy
 with the results we are seeing.  What I am trying to do now is help
 myself monitor the close calls.  I was sending everything between
 caught
 and
 delete to a spam mailbox so that I could check for any false
 positives.
 However, with my new success, that is getting out of hand.  So what I
 would like to do is set up a new account to help with the overflow and
 allow me to really monitor the close ones.

 Here is my weights in my global.cfg file:

 WEIGHT10  WARN
 WEIGHT15  WARN
 WEIGHT19  HOLD
 WEIGHT32  HOLD
 WEIGHT60  DELETE

 Here is the corresponding actions that I have in my $default$.junkmail
 file:

 WEIGHT10  WARN
 WEIGHT15  SUBJECT **SPAM**
 WEIGHT19  ROUTETO [EMAIL PROTECTED]
 WEIGHT19a  SUBJECT [%WEIGHT%]
 WEIGHT32  ROUTETO [EMAIL PROTECTED]
 WEIGHT32a  SUBJECT [%WEIGHT%]
 WEIGHT60  DELETE

 My plan with the above is to send everything with a weight of 19-31 to
 [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED]
 What I am hoping to accomplish by this is to keep a closer eye on
 those email that might accidentally be caught.  Right now, 95% of the
 messages are ending up in the [EMAIL PROTECTED] mailbox even if they
 are above the WEIGHT32 (which should then go to spam2).  However, it
 does appear that everything over 60 is being deleted.  I've checked
 all of the config files to make sure I have things set up right, and
 it does appear that way.  Am I missing something, or is there
 something diferent that I should be doing?

 Thanks!

 Todd







 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
 unsubscribe Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Kevin Bilbee








Yea, but the last line should only be weight



WEIGH.SPAM.XHIGH  weigh
x x 270



With this as your last weight all messages with a weight of
27 or higher will trigger this test.





Kevin Bilbee









From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer
Sent: Tuesday, November 07, 2006 3:13 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Help with Configuration








Todd Richards wrote: 

Thanks Kevin.  This is what I was wondering about, so I will look into howto implement.  

something like this:
WEIGHTRANGE.SPAM.LOW 
weightrange x x
10 12triggered on a weight of
10 to 12 inclusive
WEIGHTRANGE.SPAM.MID 
weightrange x x
13 15
WEIGHTRANGE.SPAM.HIGH 
weightrange x x
16 18
WEIGHTRANGE.SPAM.VHIGH 
weightrange x x
19 26
etc

and then subject tag on the hits
WEIGHTRANGE.SPAM.LOW SUBJECT [Possible Spam(low)]- 
WEIGHTRANGE.SPAM.MID SUBJECT [Possible Spam(mid)]- 
WEIGHTRANGE.SPAM.HIGH SUBJECT [Possible Spam(high)]- 
WEIGHTRANGE.SPAM.VHIGH SUBJECT [Possible Spam(vhigh)]- 
WEIGHTRANGE.SPAM.XVHIGH SUBJECT [Possible Spam(Xvhigh)]- 
etc

-Nick




Todd -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of KevinBilbeeSent: Tuesday, November 07, 2006 2:58 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Help with ConfigurationLook at using weightrange instead of weight to define your weighted tests.It simplifies the weighting and makes it clear on what will happen to themessage.Kevin Bilbee  

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Todd RichardsSent: Tuesday, November 07, 2006 11:19 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Help with ConfigurationHey Everyone -We are just getting things tuned to the point where we are truly happy with the results we are seeing.  What I am trying to do now is help myself monitor the close calls.  I was sending everything between caughtanddelete to a spam mailbox so that I could check for any false positives.However, with my new success, that is getting out of hand.  So what I would like to do is set up a new account to help with the overflow and allow me to really monitor the close ones.Here is my weights in my global.cfg file:WEIGHT10  WARNWEIGHT15  WARNWEIGHT19  HOLDWEIGHT32  HOLDWEIGHT60  DELETEHere is the corresponding actions that I have in my $default$.junkmailfile:WEIGHT10  WARNWEIGHT15  SUBJECT **SPAM**WEIGHT19  ROUTETO [EMAIL PROTECTED]WEIGHT19a  SUBJECT [%WEIGHT%]WEIGHT32  ROUTETO [EMAIL PROTECTED]WEIGHT32a  SUBJECT [%WEIGHT%]WEIGHT60  DELETEMy plan with the above is to send everything with a weight of 19-31 to [EMAIL PROTECTED], and everything from 32-59 to [EMAIL PROTECTED].  What I am hoping to accomplish by this is to keep a closer eye on those email that might accidentally be caught.  Right now, 95% of the messages are ending up in the [EMAIL PROTECTED] mailbox even if they are above the WEIGHT32 (which should then go to spam2).  However, it does appear that everything over 60 is being deleted.  I've checked all of the config files to make sure I have things set up right, and it does appear that way.  Am I missing something, or is there something diferent that I should be doing?Thanks!Todd---This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.  The archives can be found at http://www.mail-archive.com.    

---This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,just send an E-mail to [EMAIL PROTECTED], and type unsubscribeDeclude.JunkMail.  The archives can be found athttp://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail.  The archives can be foundat http://www.mail-archive.com.  


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.







---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.