<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><BR><DIV><DIV>On Wed19 Jul 06, at 17:14, Phillip Udel wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">I finished the install in production and it was really smooth to set up.<SPAN class="Apple-converted-space"> </SPAN>:)</DIV></BLOCKQUOTE><DIV><BR class="khtml-block-placeholder"></DIV>Thanks!</DIV><DIV><BR><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">So I have a few setup questions I thought I would ask the group.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Currently I am running a 5 for Spam Actions and I quarantine them and a 9</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">for the High Scoring Spam Actions witch are deleted. This might be hard to</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">answer, but would that be a normal setup for a company?</DIV></BLOCKQUOTE><DIV><BR class="khtml-block-placeholder"></DIV>I run 6 and 10 and everyone here is happy with that. Most people use my auto-delete-at-the-gateway feature of my system, and never complain that they lost something they wanted.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>I also use a lot of the rules_du_jour rulesets, which really help a lot.</DIV><DIV><BR><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Would it be unwise to push up the Spam score on RCVD_IN_BL_SPAMCOP_NET<SPAN class="Apple-converted-space"> </SPAN>and</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">a few other list servers to something like 15 to force the mail into a high</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">score and force the delete?<SPAN class="Apple-converted-space"> </SPAN>I figure if they are in the lists then I don't</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">need them.</DIV></BLOCKQUOTE><DIV><BR class="khtml-block-placeholder"></DIV>I wouldn't advise tweaking any of the rule scores until you have been running your setup for quite a long time and know how it behaves. If you want to force a delete if it's in a single RBL then do it in your MTA as it will be a lot faster and less load on your mail server. Leave the scores alone.</DIV><DIV><BR><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">I have installed MailWatch for the first time,<SPAN class="Apple-converted-space"> </SPAN>and I really like it.<SPAN class="Apple-converted-space"> </SPAN>But I</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">did have a concern with the Whitelist/blacklist. It seems less functional</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">then the normal tables and it does not look like it supports wildcards. Is</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">that truly a disadvantage?<SPAN class="Apple-converted-space"> </SPAN></DIV></BLOCKQUOTE><DIV><BR class="khtml-block-placeholder"></DIV><DIV>It doesn't support wildcards as that would involve it having to evaluate every rule for every sender/recipient of every message, which will be no faster than using a standard MailScanner ruleset. By banning wildcards, you end up with a system like the per-domain and per-user white/blacklist code in CustomConfig.pm which does all the hard work in about half a dozen hash table lookups, which is very fast in Perl. It's not a great problem as far as most of our customers are concerned. As you add more entries to the list, it stays running at full speed and its speed is not affected by the number of entries.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><BR><BLOCKQUOTE type="cite"><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Currently I have MCP Checks set to no in the MailScanner.Conf but in the</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">mail log I see this message:</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Jul 19 12:03:54 cat MailScanner[30088]: MCP Checks completed at 1389073</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">bytes per second Is that normal?</DIV></BLOCKQUOTE><DIV><BR class="khtml-block-placeholder"></DIV>Yes, that's normal, sorry. Just ignore it.</DIV><BR><DIV> <SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV>--</DIV><DIV>Julian Field</DIV><DIV>www.MailScanner.info</DIV><DIV>Buy the MailScanner book at <A href="http://www.MailScanner.info/store">www.MailScanner.info/store</A> !</DIV><DIV>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654</DIV><BR class="Apple-interchange-newline"></SPAN> </DIV><BR></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
<br />MailScanner thanks <a href="http://www.transtec.co.uk/">transtec Computers</a> for their support.
</HTML>