[Declude.JunkMail] %WEIGHT% variable as -100
Scott, This may be very minor and possibly just cosmetic, I have found that some messages will have a %WEIGHT% variable returned for a WARN action that is -100 when such a score is impossible on our system. The example below is from a message that scored 0 in the logs (seemingly correct), but shows differently in the headers. I'm using 1.79i6 currently and am not aware of any ill effects as a result. Thanks, Matt 05/06/2004 10:21:44 Q49f201ad01ca801f L1 Message OK 05/06/2004 10:21:44 Q49f201ad01ca801f Subject: Your are ON OUR LIST -- from John 05/06/2004 10:21:44 Q49f201ad01ca801f From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 209.120.224.16 ID: 05/06/2004 10:21:44 Q49f201ad01ca801f Tests failed [weight=0]: CATCHALLMAILS=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE SIZE-XS=IGNORE NOTNULL=IGNORE PASSED=IGNORE 05/06/2004 10:21:44 Q49f201ad01ca801f Last action = ""> Received: from lion.glypto.com [209.120.224.16] by mx1.mailpure.com with ESMTP (SMTPD32-8.05) id A9F21AD01CA; Thu, 06 May 2004 10:21:38 -0400 Received: from nobody by lion.glypto.com with local (Exim 4.24) id 1BLjkl-0005Xn-Dr for [EMAIL PROTECTED]; Thu, 06 May 2004 09:21:35 -0500 To: [EMAIL PROTECTED] Subject: Your are ON OUR LIST -- from John From: [EMAIL PROTECTED] Message-Id: [EMAIL PROTECTED] Date: Thu, 06 May 2004 09:21:35 -0500 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - lion.glypto.com X-AntiAbuse: Original Domain - inno-tech.com X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12] X-AntiAbuse: Sender Address Domain - no-reply.com X-MailPure: X-MailPure: X-MailPure: Spam Score: -100 X-MailPure: Scan Time: 10:21:44 on 05/06/2004 X-MailPure: Spool File: D49f201ad01ca801f.SMD X-MailPure: Server Name: lion.glypto.com X-MailPure: SMTP Sender: [EMAIL PROTECTED] X-MailPure: Received From: lion.glypto.com [209.120.224.16] X-MailPure: Country Chain: UNITED STATES-destination X-MailPure: X-MailPure: Spam and virus blocking services provided by MailPure.com X-MailPure: -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] %WEIGHT% variable as -100
This may be very minor and possibly just cosmetic, I have found that some messages will have a %WEIGHT% variable returned for a WARN action that is -100 when such a score is impossible on our system. The example below is from a message that scored 0 in the logs (seemingly correct), but shows differently in the headers. I'm using 1.79i6 currently and am not aware of any ill effects as a result. X-MailPure: Spam Score: -100 How is the WARN action set up? Which version of Declude are you running? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] %WEIGHT% variable as -100
Scott, Sorry, it wasn't the WARN action, it's coming from the XOUTHEADER (gatewayed client in this example): XOUTHEADERX-MailPure: Spam Score: %WEIGHT% - or - XINHEADERX-MailPure: Spam Score: %WEIGHT% 1.79i6 is the version that I am running presently. Following are some other examples, with the first appearance in my inbox being April 12th which happens to be less than a week after you added the weight variable to the external tests, and just after you resolved the issue where the weights were appearing about 500 points above what they really were (only in the %WEIGHT% variable). I don't believe this has affected how Declude handles the E-mail, just the %WEIGHT% variable itself. It appears that the issue with the -100 only happens when the total score is zero. I believe this is being passed off in the variable when used for external tests, but I haven't verified that yet. Thanks, Matt Received: from mx2.mailpure.com [63.170.56.5] by mx1.mailpure.com with ESMTP (SMTPD32-8.05) id A5496AC01E4; Mon, 12 Apr 2004 21:41:29 -0400 Received: from mail.pluscentury.biz ([64.205.141.39]) by mx2.mailpure.com with Microsoft SMTPSVC(6.0.3790.0); Mon, 12 Apr 2004 21:40:16 -0400 Received: (qmail 31553 invoked from network); 13 Apr 2004 13:52:18 - Received: from mail.pluscentury.biz (HELO localhost.localdomain) (64.205.141.39) by mail.pluscentury.biz with SMTP; 13 Apr 2004 13:52:18 - User-Agent: KMail/1.4.3 From: Mackenna [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: I bet we can hit it off Reply-To: [EMAIL PROTECTED] Precedence: first-class Mime-Version: 1.0 X-cid: 190 X-eid: 434378 X-lid: 143 Bounces-to: [EMAIL PROTECTED] Content-Type: multipart/alternative;boundary=MuLtIpArT_BoUnDaRy Return-Path: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] X-OriginalArrivalTime: 13 Apr 2004 01:40:17.0371 (UTC) FILETIME=[462032B0:01C420F8] Date: 12 Apr 2004 21:40:17 -0400 X-MailPure: X-MailPure: LEGITCONTENT: Passed, legitimate content detected (weight -2). X-MailPure: MXBAIT: Message failed MXBAIT test (line 3, weight 1). X-MailPure: SPAMMYURL: Message failed SPAMMYURL test (line 10, weight 1). X-MailPure: X-MailPure: Spam Score: -100 X-MailPure: Scan Time: 21:41:38 on 04/12/2004 X-MailPure: Spool File: D454906ac01e4fad2.SMD X-MailPure: Server Name: mail.pluscentury.biz X-MailPure: SMTP Sender: [EMAIL PROTECTED] X-MailPure: Received From: mail.pluscentury.biz [64.205.141.39] X-MailPure: Country Chain: UNITED STATES-destination X-MailPure: X-MailPure: Spam and virus blocking services provided by MailPure.com X-MailPure: Received: from lakermmtao02.cox.net [68.230.240.37] by mx1.mailpure.com with ESMTP (SMTPD32-8.05) id A7E6A008A; Tue, 13 Apr 2004 21:46:14 -0400 Received: from fairview ([68.102.33.6]) by lakermmtao02.cox.net (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with ESMTP id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Tue, 13 Apr 2004 21:45:56 -0400 Return-Receipt-To: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: Matt Bramble [EMAIL PROTECTED] Subject: e-mail account Date: Tue, 13 Apr 2004 20:56:11 -0500 Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000__01C42199.C15A9AF0 X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2616 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-MailPure: X-MailPure: X-MailPure: Spam Score: -100 X-MailPure: Scan Time: 21:46:48 on 04/13/2004 X-MailPure: Spool File: D97e6000a008a0bf7.SMD X-MailPure: Server Name: lakermmtao02.cox.net X-MailPure: SMTP Sender: [EMAIL PROTECTED] X-MailPure: Received From: lakermmtao02.cox.net [68.230.240.37] X-MailPure: Country Chain: UNITED STATES-destination X-MailPure: X-MailPure: Spam and virus blocking services provided by MailPure.com X-MailPure: Received: from qwertyx1.qwertyx.net [12.107.136.168] by mx1.mailpure.com (SMTPD32-8.05) id AC456C7C00A0; Mon, 19 Apr 2004 21:26:29 -0400 Received: by qwertyx1.qwertyx.net (Postfix, from userid 515) id 15B829286D; Mon, 19 Apr 2004 21:26:30 -0400 (EDT) Received: from [192.168.237.100] (dwolk-home [68.236.149.197]) by qwertyx1.qwertyx.net (Postfix) with ESMTP id 8A1839284F for [EMAIL PROTECTED]; Mon, 19 Apr 2004 21:26:29 -0400 (EDT) Subject: Re: DNS errors on my server From: [EMAIL PROTECTED] To: Matthew Bramble [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] References:
Re: [Declude.JunkMail] %WEIGHT% variable as -100
1.79i6 is the version that I am running presently. Following are some other examples, with the first appearance in my inbox being April 12th which happens to be less than a week after you added the weight variable to the external tests, and just after you resolved the issue where the weights were appearing about 500 points above what they really were (only in the %WEIGHT% variable). I don't believe this has affected how Declude handles the E-mail, just the %WEIGHT% variable itself. It appears that the issue with the -100 only happens when the total score is zero. I believe this is being passed off in the variable when used for external tests, but I haven't verified that yet. I've found the problem. When we made the change to the %WEIGHT% variable to calculate the current weight in the middle of testing, it would check to see if the final weight was 0 and if so would then calculate it directly. It looks like we'll need to change that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] %WEIGHT% Variable
Should the %WEIGHT% Variable work with the SUBJECT action in 1.35a or 1.36. I know it works other places but when I tried it in the sbject action it didn't work. Thanks Stu - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] %WEIGHT% Variable
Should the %WEIGHT% Variable work with the SUBJECT action in 1.35a or 1.36. I know it works other places but when I tried it in the sbject action it didn't work. It should work with 1.36, but was just added and has not been thoroughly tested yet. What happens when you try using it? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
DSN:Re: [Declude.JunkMail] %WEIGHT% Variable
I used it with 1.35a WEIGHT15SUBJECT Junkmail Wt:%WEIGHT% (Yes the quotes are part of the subject tag line) The result was exactly that Junkmail Wt:%WEIGHT%Viagra is Great Stu At 04:06 PM 02/01/2002 -0500, you wrote: Should the %WEIGHT% Variable work with the SUBJECT action in 1.35a or 1.36. I know it works other places but when I tried it in the sbject action it didn't work. It should work with 1.36, but was just added and has not been thoroughly tested yet. What happens when you try using it? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . - CSOnline Technical Support hours - Monday thru Saturday 7am - 1am CSOnline Technical Support Numbers Seneca814-677-2447 Clarion 814-227-3638 Meadville 814-425-1696 Parker724-399-1158 http://www.csonline.net http://www.cshowcase.com http://www.learncenter.com - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
