DAve wrote: > Ed Russell wrote: > > > > 2. Once this is in place should I re-activate pzyor, dcc or razor? > > Is one better than the other? Are there advantages to either? > > I use neither, though I think I am in the minority. I routinely check > my spam and I have found that bayes, rayzor, dcc, and most of the > SARE rules catch little if any spam "for me". So I don't run them and > save the CPU for additional spamd processes.
That's odd. Bayes, Razor2, DCC work quite well for me. Check out my stats from today: TOP SPAM RULES FIRED ------------------------------------------------------------ RANK RULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM ------------------------------------------------------------ 1 RAZOR2_CF_RANGE_51_100 1280 5.02 48.05 83.33 0.98 2 RAZOR2_CHECK 1259 4.94 47.26 81.97 1.15 3 RAZOR2_CF_RANGE_E8_51_100 1164 4.56 43.69 75.78 0.27 4 URIBL_BLACK 1147 4.50 43.06 74.67 0.44 5 HTML_MESSAGE 1071 4.20 40.20 69.73 44.50 6 DCC_CHECK 1046 4.10 39.26 68.10 6.56 7 BAYES_99 985 3.86 36.97 64.13 0.44 8 DIGEST_MULTIPLE 937 3.67 35.17 61.00 0.35 9 URIBL_JP_SURBL 927 3.63 34.80 60.35 0.09 10 URIBL_SBL 903 3.54 33.90 58.79 0.35 11 URIBL_WS_SURBL 797 3.12 29.92 51.89 0.27 12 RCVD_IN_XBL 719 2.82 26.99 46.81 0.00 13 RCVD_IN_BL_SPAMCOP_NET 669 2.62 25.11 43.55 0.98 14 URIBL_OB_SURBL 653 2.56 24.51 42.51 0.09 15 URIBL_SC_SURBL 552 2.16 20.72 35.94 0.00 16 RAZOR2_CF_RANGE_E4_51_100 550 2.16 20.65 35.81 0.71 17 RCVD_IN_SORBS_DUL 448 1.76 16.82 29.17 0.27 18 MIME_HTML_ONLY 438 1.72 16.44 28.52 7.18 19 RCVD_IN_NJABL_DUL 348 1.36 13.06 22.66 0.27 20 RCVD_IN_SBL 330 1.29 12.39 21.48 0.09 ------------------------------------------------------------ Razor2 caught 83% of the spam, DCC caught 68%, and Bayes got 64%. > Bottom line, my clients would rather have 95% of the spam stopped and > a 20 second delivery time than 100% of spam caught and a two minute > delivery time. As always ;^) YMMV. Setup a honeypot account and check > it's contents daily. That will tell you if the choices you make are > correct or not. > > DAve > > PS. While bayes/rayzor/dcc don't provide a benefit for me, I find > URIBL and SURBL are responsible for catching at the very least 70% of > my spam and at times 90%+. I also move SARE rules and custom rules in > and out weekly, depends on the type of traffic I see. Right now > SARE_OEM and SARE_STOCK are helping out. Next week it might be > SARE_ADULT. Agreed on URIBL and SURBL. Both of those have good showings in my stats as well. I don't swap out the SARE rules. I use most of them and just let them run. My server doesn't see quite enough traffic for it to create a problem. They don't catch as much as the net rules, but they do help out from time to time. -- Bowie
