The gibberish filter has only "body 0" so no weight is posted in the
filter. Weight is only assigned by Declude upon failure of the gibberish
filter.
----- Original Message -----
From: "Scott Fisher" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Wednesday, April 05, 2006 1:13 PM
Subject: Re: [Declude.JunkMail] This doesnt add up
You are assigning 30/40 points for the failure of the gibberish filter.
Are you also scoring points within the gibberish filter.
a body 15 contains text would score 15 for that line matching plus the 30
for the filter matching.
----- Original Message -----
From: "Todd" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Wednesday, April 05, 2006 12:33 PM
Subject: Re: [Declude.JunkMail] This doesnt add up
I recently changed the Gibberish weight from 30 to 40.
SPFPASS spf pass x 0 0
GIBBERISH filter d:\imail\declude\filters\gibberish.txt x 40
0
SPAMCHK external weight
"d:\imail\declude\spamchk\spamchk.exe"
----- Original Message -----
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Wednesday, April 05, 2006 12:21 PM
Subject: Re: [Declude.JunkMail] This doesnt add up
Todd,
Can you post your gibberish, spamchk, and spfpass lines from your
global.cfg as well.
Darrell
Todd writes:
04/01/2006 22:28:20 Q52D60D410090E5F8 Could not load filter file
d:\imail\declude\filters\navsmtpspam.txt.txt.
04/01/2006 22:28:20 Q52D60D410090E5F8 L1 Message OK
04/01/2006 22:28:20 Q52D60D410090E5F8 Tests failed [weight=30]:
SUBJECTSPACES7=WARN SUBJECTSPACES10=WARN SPFPASS=WARN SPAMCHK=WARN
GIBBERISH=WARN CATCHALLMAILS=IGNORE
04/01/2006 22:28:20 Q52D60D410090E5F8 Action(s) taken for
[EMAIL PROTECTED] = IGNORE WARN [LAST ACTION=WARN]
04/01/2006 22:28:20 Q52D60D410090E5F8 Cumulative action(s) taken on
this email = IGNORE WARN [LAST ACTION=WARN] ----- Original
Message ----- From: "Darrell ([EMAIL PROTECTED])"
<[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Wednesday, April 05, 2006 11:30 AM
Subject: Re: [Declude.JunkMail] This doesnt add up
Todd,
We would really need to see the Declude log entries for that message
to better determine the issue. Can you post that message entry.
Darrell
-------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers. Todd writes:
A lot of spam has been getting through lately and at first I was
thinking my Declude needed some tweaking. I am seeing some funny
stuff though. I find emails where emails contain items that should
have triggered filters but did not. I am on IMail 8.15 and Declude
2.06. Here is a header of an email where the numbers dont add to the
score. It should have had a score of 5 + 15 + 15 + 30 = 65 but
instead shows 30 My global.cfg has the following entries for the
tests that were triggered SUBJECTSPACES7 subjectspaces 7 x
5 0
SUBJECTSPACES10 subjectspaces 10 x 15 0
SPFPASS spf pass x 0 0
X-RBL-Warning: SUBJECTSPACES7: Subject with at least 7 spaces found.
X-RBL-Warning: SUBJECTSPACES10: Subject with at least 10 spaces
found.
X-RBL-Warning: SPFPASS: SPF returned PASS for this E-mail.
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.
X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 463,
weight 30)
X-Declude-Sender: [EMAIL PROTECTED] [69.89.85.90]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com)
for spam.
X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS,
SPAMCHK, GIBBERISH, CATCHALLMAILS [30]
X-Note: Total spam weight of this E-mail is 30 .
X-Country-Chain: UNITED STATES->destination
X-Note: This E-mail was sent from eveningtrees.com
([69.89.85.90]). ---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
-------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
