A couple of thoughts. If your Declude is on a gateway server, you'll need your actions to be set in the global.cfg. If Declude sits on your final mail server the $default$.junkmail
It wouldn't hurt to check the logs. There's a couple of tools out there that analyze the logs, but I can't recommend any since I use my own. As for weighting, my personal opionion is that some of the initial weights are a little low: CBL, SBL and SPAMCOP, I'd put at least at 50% or 10 points if you are holding at 20. Maybe consider adding the fiveten or the NJABL tests too. Held e-mail should be in imail\spool\spam. If you have the Junkmail Pro version and have the ability to add filters, search the archives for the Spamcop SURBL filter. It's also a pretty effective way to catch URL's in the body. Also the Mailpure filters could be run with Declude Junkmail Pro. Good learning tools for creating your own filters. You could also get / create your own spamdomains files to assist in spam catching. Some were posted in the archive in the distant past. If you are interested in Declude long-term, the Message Sniffer is a great add-on. It catches a lot of spam, t works very well here. <<< [EMAIL PROTECTED] 8/18 1:55p >>> We setup the JunkMail evaluation on our IMAIL server. We currently also use Declude AntiVirus and are very happy with its results. We setup JunkMail evaluation right out of the box and changing only weight20 to HOLD instead of WARN. Does it write any held emails to IMail/spool/spam directory or where? I can't tell that any spam filtering it going on because it seems that all emails are being passed and none are being held. Does anyone have their $default$.JunkMail file that I could review settings to see what I am missing or can Declude guys take a look and see what we have setup wrong? --- [This E-mail scanned for viruses by Advertinet Inc. Declude Virus Software ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
