14.10.2009 19:17, R-Elists kirjoitti:
All I can say is that if these numbers were real or typical I would be out of business.perkel, i might be wrong, yet it doesnt appear to me that Jari have enough mail volume to have a reasonable statistical base... - rh
You are not wrong, this is a basically one person system. My HAM is mostly mailing lists and bulk from newspapers. My SPAM is mostly old useless email addresses that work kind of 'spam traps' as they are not in other use but to collect SPAM. I also get and info@ for my earlier employer, I filter SPAM out of it and forward it to the company. My personal email for that company is also directed to me, and works as a great SPAM source (Nobody uses it anymore but it attracts much spam as it was used in Internet discussions while I worked there. This is the latest sa-stats from cronjob before logrotate. Should be email load for one day. I'm pretty happy with my Bayes training, and then the BOTNET seem to work nicely for me. But the HOSTKARMA_W* still makes one wonder. They are both now in the TOP SPAM tops. ********************************************************************* Email: 1333 Autolearn: 803 AvgScore: 11.93 AvgScanTime: 12.23 sec Spam: 646 Autolearn: 541 AvgScore: 32.97 AvgScanTime: 10.58 sec Ham: 687 Autolearn: 262 AvgScore: -7.85 AvgScanTime: 13.79 sec Time Spent Running SA: 4.53 hours Time Spent Processing Spam: 1.90 hours Time Spent Processing Ham: 2.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 BAYES_99 625 46.89 96.75 0.00 2 DCC_CHECK 608 60.32 94.12 28.53 3 RAZOR2_CHECK 600 45.01 92.88 0.00 4 HTML_MESSAGE 599 49.74 92.72 9.32 5 RAZOR2_CF_RANGE_51_100 599 44.94 92.72 0.00 6 RCVD_IN_BRBL_RELAY 598 46.21 92.57 2.62 7 URIBL_BLACK 596 44.71 92.26 0.00 8 DIGEST_MULTIPLE 589 44.19 91.18 0.00 9 BOTNET 588 44.11 91.02 0.00 10 URIBL_SBL 563 42.31 87.15 0.15 11 RAZOR2_CF_RANGE_E8_51_100 540 40.51 83.59 0.00 12 URIBL_JP_SURBL 537 40.29 83.13 0.00 13 URIBL_WS_SURBL 504 37.81 78.02 0.00 14 URIBL_AB_SURBL 426 31.96 65.94 0.00 15 RDNS_NONE 393 29.63 60.84 0.29 16 RCVD_IN_BL_SPAMCOP_NET 392 29.41 60.68 0.00 17 RCVD_IN_HOSTKARMA_WL 359 50.49 55.57 45.71 18 RCVD_IN_HOSTKARMA_W 359 67.29 55.57 78.31 19 KHOP_RCVD_UNTRUST 359 59.19 55.57 62.59 20 RCVD_IN_PSBL 352 26.41 54.49 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 BAYES_00 616 46.29 0.15 89.67 2 RCVD_IN_HOSTKARMA_W 538 67.29 55.57 78.31 3 AWL 506 41.26 6.81 73.65 4 KHOP_RCVD_UNTRUST 430 59.19 55.57 62.59 5 RCVD_IN_HOSTKARMA_WL 314 50.49 55.57 45.71 6 KHOP_HELO_FCRDNS 262 23.86 8.67 38.14 7 RCVD_IN_DNSWL_LOW 226 16.95 0.00 32.90 8 KHOP_NO_FULL_NAME 197 16.13 2.79 28.68 9 DCC_CHECK 196 60.32 94.12 28.53 10 RCVD_IN_DNSWL_HI 152 11.40 0.00 22.13 11 DKIM_SIGNED 144 11.78 2.01 20.96 12 RCVD_IN_DNSWL_MED 106 7.95 0.00 15.43 13 RCVD_IN_BSP_OTHER 65 4.88 0.00 9.46 14 HTML_MESSAGE 64 49.74 92.72 9.32 15 KHOP_RCVD_TRUST 59 4.43 0.00 8.59 16 DKIM_VERIFIED 39 3.00 0.15 5.68 17 KHOP_PGP_SIGNED 34 2.55 0.00 4.95 18 MIME_QP_LONG_LINE 34 3.60 2.17 4.95 19 KHOP_2IPS_RCVD 27 3.00 2.01 3.93 20 RCVD_IN_BRBL_RELAY 18 46.21 92.57 2.62 ---------------------------------------------------------------------- -- http://www.iki.fi/jarif/ The human race is a race of cowards; and I am not only marching in that procession but carrying a banner. -- Mark Twain
pgpNpM1ypxhKE.pgp
Description: PGP signature
