RE: [Declude.JunkMail] Junkmail Syntax

2005-03-01 Thread David Barker
Kyle,
 
From the system documentation written by Scott  Perry.
 
IGNORE   This action does not do anything (aside from log that the E-mail
failed the test).  Same as the LOG action.
LOG  This action does not do anything (aside from log that the E-mail
failed the test).  Same as the IGNORE action.

David B
www.declude.com




From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher
Sent: Monday, February 28, 2005 4:00 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Junkmail Syntax



In the Junkmail file you have DELETE, HOLD, WARN, IGNORE. 

 

What does IGNORE actually do?

 

Kyle



__ NOD32 1.1011 (20050228) Information __

This message was checked by NOD32 antivirus system.
http://www.nod32.com


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Junkmail Syntax

2005-02-28 Thread Kyle Fisher
Looking at the log it doesn't seem that way.  If you look at the header it
shows the same.

02/28/2005 15:00:19 Q865e00e001301b5a nIPNOTINMX:-3 nNOLEGITCONTENT:-5 .
Total weight = -8.
02/28/2005 15:00:19 Q865e00e001301b5a L1 Message OK
02/28/2005 15:00:19 Q865e00e001301b5a Subject: Read: [Fwd: FW: Applebees -
don't delete - enjoy]
02/28/2005 15:00:19 Q865e00e001301b5a From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]  IP: 209.34.96.3 ID: 
02/28/2005 15:00:19 Q865e00e001301b5a Tests failed [weight=-8]:
CATCHALLMAILS=IGNORE 
02/28/2005 15:00:19 Q865e00e001301b5a Last action = IGNORE.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Monday, February 28, 2005 3:20 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Junkmail Syntax

It will do nothing other than log an entry to your log. 

Darrell
 
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG

Integration, and Log Parsers. 


Kyle Fisher writes: 

 In the Junkmail file you have DELETE, HOLD, WARN, IGNORE.  
 
   
 
 What does IGNORE actually do? 
 
   
 
 Kyle 
 
 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Junkmail Syntax

2005-02-28 Thread Darrell \([EMAIL PROTECTED])
The message's last action is IGNORE which means it will be delivered.  
What are the actions set on the two tests it hit on?  If they are WARN 
then they will show in the headers. 

Darrell 

Kyle Fisher writes: 

Looking at the log it doesn't seem that way.  If you look at the header it
shows the same. 

02/28/2005 15:00:19 Q865e00e001301b5a nIPNOTINMX:-3 nNOLEGITCONTENT:-5 .
Total weight = -8.
02/28/2005 15:00:19 Q865e00e001301b5a L1 Message OK
02/28/2005 15:00:19 Q865e00e001301b5a Subject: Read: [Fwd: FW: Applebees -
don't delete - enjoy]
02/28/2005 15:00:19 Q865e00e001301b5a From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]  IP: 209.34.96.3 ID: 
02/28/2005 15:00:19 Q865e00e001301b5a Tests failed [weight=-8]:
CATCHALLMAILS=IGNORE 
02/28/2005 15:00:19 Q865e00e001301b5a Last action = IGNORE. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Monday, February 28, 2005 3:20 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Junkmail Syntax 

It will do nothing other than log an entry to your log.  

Darrell
 
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 

Integration, and Log Parsers.  

Kyle Fisher writes:  

In the Junkmail file you have DELETE, HOLD, WARN, IGNORE.   

   

What does IGNORE actually do?  

   

Kyle  

  

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com. 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Junkmail Syntax

2005-02-28 Thread Kyle Fisher
Right now I am not hiding any tests.  I have IPNOTINMX -3 and 
NOLEGITCONTENT -5 set to ignore (default when I purchased Declude). 

In the sample below you can see where it has a negative weight of 8 and the
header shows the same, but they are set to ignore.  I have more samples
where it might have only failed sniffer (weight 8) and in the header it
shows total weight 5 but you will see nolegitcontent in the header too.






-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Monday, February 28, 2005 3:35 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Junkmail Syntax

The message's last action is IGNORE which means it will be delivered.  
What are the actions set on the two tests it hit on?  If they are WARN 
then they will show in the headers. 

Darrell 

Kyle Fisher writes: 

 Looking at the log it doesn't seem that way.  If you look at the header it
 shows the same. 
 
 02/28/2005 15:00:19 Q865e00e001301b5a nIPNOTINMX:-3 nNOLEGITCONTENT:-5 .
 Total weight = -8.
 02/28/2005 15:00:19 Q865e00e001301b5a L1 Message OK
 02/28/2005 15:00:19 Q865e00e001301b5a Subject: Read: [Fwd: FW: Applebees -
 don't delete - enjoy]
 02/28/2005 15:00:19 Q865e00e001301b5a From: [EMAIL PROTECTED] To:
 [EMAIL PROTECTED]  IP: 209.34.96.3 ID: 
 02/28/2005 15:00:19 Q865e00e001301b5a Tests failed [weight=-8]:
 CATCHALLMAILS=IGNORE 
 02/28/2005 15:00:19 Q865e00e001301b5a Last action = IGNORE. 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
 ([EMAIL PROTECTED])
 Sent: Monday, February 28, 2005 3:20 PM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] Junkmail Syntax 
 
 It will do nothing other than log an entry to your log.  
 
 Darrell
  
 Check out http://www.invariantsystems.com for utilities for Declude And 
 Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG 
 
 Integration, and Log Parsers.  
 
 
 Kyle Fisher writes:  
 
 In the Junkmail file you have DELETE, HOLD, WARN, IGNORE.   
 

 
 What does IGNORE actually do?  
 

 
 Kyle  
 
   
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)] 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com. 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)] 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 


 
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG

Integration, and Log Parsers. 


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.