Todd, I do not see them in the headers ?
X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS, SPAMCHK, GIBBERISH, CATCHALLMAILS [30] David B www.declude.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Sent: Wednesday, April 05, 2006 12:56 PM To: [email protected] Subject: Re: [Declude.JunkMail] This doesnt add up Thanks David, both of these tests are not hidden and show up in the headers. Todd ----- Original Message ----- From: "David Barker" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Wednesday, April 05, 2006 11:47 AM Subject: RE: [Declude.JunkMail] This doesnt add up > To reduce false positives NOLEGITCONTENT and IPNOTINMX are hidden tests, > check your global.cfg you should see the -5 > > David B > www.declude.com > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Todd > Sent: Wednesday, April 05, 2006 12:22 PM > To: [email protected] > Subject: [Declude.JunkMail] This doesnt add up > > > A lot of spam has been getting through lately and at first I was thinking > my > Declude needed some tweaking. I am seeing some funny stuff though. I > find > emails where emails contain items that should have triggered filters but > did > not. I am on IMail 8.15 and Declude 2.06. > > Here is a header of an email where the numbers dont add to the score. It > should have had a score of 5 + 15 + 15 + 30 = 65 but instead shows 30 > > My global.cfg has the following entries for the tests that were triggered > > SUBJECTSPACES7 subjectspaces 7 x 5 0 > SUBJECTSPACES10 subjectspaces 10 x 15 0 > SPFPASS spf pass x 0 0 > > > X-RBL-Warning: SUBJECTSPACES7: Subject with at least 7 spaces found. > X-RBL-Warning: SUBJECTSPACES10: Subject with at least 10 spaces found. > X-RBL-Warning: SPFPASS: SPF returned PASS for this E-mail. > X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15. > X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 463, weight > 30) > X-Declude-Sender: [EMAIL PROTECTED] [69.89.85.90] > X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for > spam. > X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS, SPAMCHK, > GIBBERISH, CATCHALLMAILS [30] > X-Note: Total spam weight of this E-mail is 30 . > X-Country-Chain: UNITED STATES->destination > X-Note: This E-mail was sent from eveningtrees.com ([69.89.85.90]). > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
