Hello Samantha. While the default WEIGHT10 and WEIGHT20 settings are good starting points, I firmly believe that more granular control is needed.
This is accomplished using the weight range settings. Example, here is my configuration: WEIGHT9 IGNORE WEIGHTRANGE10-14 IGNORE WEIGHTRANGE15-19 IGNORE WEIGHTRANGE20-24 IGNORE WEIGHTRANGE25-29 HOLD WEIGHTRANGE30-34 HOLD WEIGHTRANGE35-39 DELETE WEIGHTRANGE40-44 DELETE WEIGHTRANGE45-59 DELETE WEIGHT50 DELETE Then, when ever I make changes to the tests, I can easily adjust the actions for a couple of days to make sure the changes I make do not cause problems. This way also, I force higher weights and higher allowances for FP. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Bridges, Samantha > Sent: Monday, October 06, 2003 6:15 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Question - Weight 10? > > Good morning all. > > I blocked weight 10 and found it blocking too many legitimate mail. I > went back to Warn for weight 10 and starting getting more spam. Below > is the headers from a spam message that is failing the weight 10 test. > It is spam and I want to find another way to block mail like this. > > How would you block this message, since you cannot block weight 10 and > still get legitimate mail? > > Thanks for any help. > > Samantha > > > Microsoft Mail Internet Headers Version 2.0 > Received: from apollo.misd.net ([64.88.0.98]) by xmail1.macombisd.org > with Microsoft SMTPSVC(5.0.2195.6713); > Sun, 5 Oct 2003 19:28:08 -0400 > Received: from SMTP32-FWD by apollo.misd.net > (SMTP32) id A00FA0303; Sun, 5 Oct 2003 19:24:26 -0400 > Received: from pc1.passfelt.com [207.134.164.19] by apollo.misd.net > (SMTPD32-8.02) id A829F477014E; Sun, 05 Oct 2003 19:24:25 -0400 > Message-Id: > <[EMAIL PROTECTED]> > From: Student Loans <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Reply-to: <[EMAIL PROTECTED]> > Subject: CUT YOUR STUDENT LOAN PAYMENTS BY UP TO 50% > Date: Sun, 5 Oct 2003 19:10:58 -0400 > ID: MSG_12412951-10673063-felton4 > X-Info: Please report any abuse from the part of list owner to > [EMAIL PROTECTED] > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe" > X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL10878 > X-RBL-Warning: IPNOTINMX: > X-RBL-Warning: WEIGHT10: Weight of 10 reaches or exceeds the limit of > 10. > X-Declude-Sender: [EMAIL PROTECTED] > [207.134.164.19] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) > for spam. > X-Spam-Tests-Failed: RELAY, SBL, IPNOTINMX, WEIGHT10 [10] > X-IMAIL-SPAM-STATISTICS: 1.0000 > Return-Path: [EMAIL PROTECTED] > X-OriginalArrivalTime: 05 Oct 2003 23:28:08.0627 (UTC) > FILETIME=[55BD6030:01C38B98] > > --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe > Content-Type: text/plain; charset = "iso-8859-1"; > Content-Disposition: inline > Content-Transfer-Encoding: 8bit > > --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe > Content-Type: text/html; charset = "iso-8859-1"; > Content-Disposition: inline > Content-Transfer-Encoding: 8bit > > > --Boundary-=_baeb2df51f0b33dfc444fd6844e2afbfe-- > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
