RE: [Declude.JunkMail] Junkmail Syntax
Kyle, From the system documentation written by Scott Perry. IGNORE This action does not do anything (aside from log that the E-mail failed the test). Same as the LOG action. LOG This action does not do anything (aside from log that the E-mail failed the test). Same as the IGNORE action. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Monday, February 28, 2005 4:00 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Junkmail Syntax In the Junkmail file you have DELETE, HOLD, WARN, IGNORE. What does IGNORE actually do? Kyle __ NOD32 1.1011 (20050228) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Junkmail Syntax
Looking at the log it doesn't seem that way. If you look at the header it shows the same. 02/28/2005 15:00:19 Q865e00e001301b5a nIPNOTINMX:-3 nNOLEGITCONTENT:-5 . Total weight = -8. 02/28/2005 15:00:19 Q865e00e001301b5a L1 Message OK 02/28/2005 15:00:19 Q865e00e001301b5a Subject: Read: [Fwd: FW: Applebees - don't delete - enjoy] 02/28/2005 15:00:19 Q865e00e001301b5a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 209.34.96.3 ID: 02/28/2005 15:00:19 Q865e00e001301b5a Tests failed [weight=-8]: CATCHALLMAILS=IGNORE 02/28/2005 15:00:19 Q865e00e001301b5a Last action = IGNORE. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 28, 2005 3:20 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Junkmail Syntax It will do nothing other than log an entry to your log. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Kyle Fisher writes: In the Junkmail file you have DELETE, HOLD, WARN, IGNORE. What does IGNORE actually do? Kyle --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Junkmail Syntax
The message's last action is IGNORE which means it will be delivered. What are the actions set on the two tests it hit on? If they are WARN then they will show in the headers. Darrell Kyle Fisher writes: Looking at the log it doesn't seem that way. If you look at the header it shows the same. 02/28/2005 15:00:19 Q865e00e001301b5a nIPNOTINMX:-3 nNOLEGITCONTENT:-5 . Total weight = -8. 02/28/2005 15:00:19 Q865e00e001301b5a L1 Message OK 02/28/2005 15:00:19 Q865e00e001301b5a Subject: Read: [Fwd: FW: Applebees - don't delete - enjoy] 02/28/2005 15:00:19 Q865e00e001301b5a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 209.34.96.3 ID: 02/28/2005 15:00:19 Q865e00e001301b5a Tests failed [weight=-8]: CATCHALLMAILS=IGNORE 02/28/2005 15:00:19 Q865e00e001301b5a Last action = IGNORE. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 28, 2005 3:20 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Junkmail Syntax It will do nothing other than log an entry to your log. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Kyle Fisher writes: In the Junkmail file you have DELETE, HOLD, WARN, IGNORE. What does IGNORE actually do? Kyle --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Junkmail Syntax
Right now I am not hiding any tests. I have IPNOTINMX -3 and NOLEGITCONTENT -5 set to ignore (default when I purchased Declude). In the sample below you can see where it has a negative weight of 8 and the header shows the same, but they are set to ignore. I have more samples where it might have only failed sniffer (weight 8) and in the header it shows total weight 5 but you will see nolegitcontent in the header too. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 28, 2005 3:35 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Junkmail Syntax The message's last action is IGNORE which means it will be delivered. What are the actions set on the two tests it hit on? If they are WARN then they will show in the headers. Darrell Kyle Fisher writes: Looking at the log it doesn't seem that way. If you look at the header it shows the same. 02/28/2005 15:00:19 Q865e00e001301b5a nIPNOTINMX:-3 nNOLEGITCONTENT:-5 . Total weight = -8. 02/28/2005 15:00:19 Q865e00e001301b5a L1 Message OK 02/28/2005 15:00:19 Q865e00e001301b5a Subject: Read: [Fwd: FW: Applebees - don't delete - enjoy] 02/28/2005 15:00:19 Q865e00e001301b5a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 209.34.96.3 ID: 02/28/2005 15:00:19 Q865e00e001301b5a Tests failed [weight=-8]: CATCHALLMAILS=IGNORE 02/28/2005 15:00:19 Q865e00e001301b5a Last action = IGNORE. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, February 28, 2005 3:20 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Junkmail Syntax It will do nothing other than log an entry to your log. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Kyle Fisher writes: In the Junkmail file you have DELETE, HOLD, WARN, IGNORE. What does IGNORE actually do? Kyle --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.