Re: [Declude.JunkMail] DOW test and Spam on specific days

2004-10-22 Thread Darin Cox
Haven't tried it but I doubt it.  I don't know if Scott is overlapping 7 and
zero for range checks.

If the test is defined as

DOW dow X Y 2 0

The code probably just checks for >=X and <= Y... and since no numbers are
both >= 6 and <= 0 at the same time, no days would get caught.

Scott, please correct me if I've assumed badly...

Darin.


- Original Message - 
From: "Rick Davidson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October 22, 2004 10:08 AM
Subject: Re: [Declude.JunkMail] DOW test and Spam on specific days


is it actually necessary to use two tests?

Wouldnt "DOW dow 6 0 2 0" work?

Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message - 
From: "Darin Cox" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 19, 2004 5:25 PM
Subject: Re: [Declude.JunkMail] DOW test and Spam on specific days


>I believe Sunday is day zero, so you would need two tests.  For example...
>
> DOW_SUN dow 0 0 2 0
> DOW_SAT dow 6 6 2 0
>
> I don't have statistics to show you, but I can say more spam comes in on a
> weekday than on weekends, and more on Saturday than Sunday.  We weight
> Sunday a little higher due to much less legit mail on Sunday.
>
> Darin.
>
>
> - Original Message ----- 
> From: "Mark Smith" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, October 19, 2004 5:02 PM
> Subject: [Declude.JunkMail] DOW test and Spam on specific days
>
>
> Assuming we wanted to setup a Sat-Sun DOW test with a weight of 2 for the
> message hitting on the weekend, I guess we would use:
>
> DOW dow 6 7 2 0
>
> Correct?
>
> Having said that, does anyone have any metrics on what days more spam
> comes
> in?
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] DOW test and Spam on specific days

2004-10-22 Thread Rick Davidson
is it actually necessary to use two tests?
Wouldnt "DOW dow 6 0 2 0" work?
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message - 
From: "Darin Cox" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 19, 2004 5:25 PM
Subject: Re: [Declude.JunkMail] DOW test and Spam on specific days


I believe Sunday is day zero, so you would need two tests.  For example...
DOW_SUN dow 0 0 2 0
DOW_SAT dow 6 6 2 0
I don't have statistics to show you, but I can say more spam comes in on a
weekday than on weekends, and more on Saturday than Sunday.  We weight
Sunday a little higher due to much less legit mail on Sunday.
Darin.
- Original Message - 
From: "Mark Smith" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 19, 2004 5:02 PM
Subject: [Declude.JunkMail] DOW test and Spam on specific days

Assuming we wanted to setup a Sat-Sun DOW test with a weight of 2 for the
message hitting on the weekend, I guess we would use:
DOW dow 6 7 2 0
Correct?
Having said that, does anyone have any metrics on what days more spam 
comes
in?

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] DOW test and Spam on specific days

2004-10-19 Thread Colbeck, Andrew
Scott, you have far less ham on weekends.  Hypothetically, a company like
yours might use the day of week test to add a little weight on the weekend,
on the basis that your false positives from doing so will be fewer.

I have a similar volume pattern.

And to answer Mark's initial question, another idea for a way to use DOW is
to combine it with the COPYFILE action to, say, archive every message that
comes in on Thursday.

And no, I don't use the DOW test.

Andrew 8)

-Original Message-
From: Scott Fisher [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, October 19, 2004 2:27 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] DOW test and Spam on specific days


  Here are my October totals by day.

  Day spam totals Date CountOfMessageID DEL SPAM Held SPAM Poss SPAM OK
  10/1/2004 4513 2878 57 63 1515
  10/2/2004 3169 2915 51 9 194
  10/3/2004 2949 2665 57 17 210
  10/4/2004 4594 2898 39 42 1615
  10/5/2004 4811 3038 41 39 1693
  10/6/2004 5035 3193 34 36 1772
  10/7/2004 4661 3013 28 32 1588
  10/8/2004 4409 2941 28 16 1424
  10/9/2004 3188 2942 21 18 207
  10/10/2004 1898 1774 11 10 103
  10/11/2004 3235 1813 27 20 1375
  10/12/2004 4853 3057 43 48 1705
  10/13/2004 4946 3087 53 35 1771
  10/14/2004 5073 3150 27 34 1862
  10/15/2004 4781 3140 19 40 1582
  10/16/2004 2904 2659 16 9 220
  10/17/2004 2950 2660 20 12 258
  10/18/2004 4323 2787 32 45 1459


That said, my opinion is that Day of Week and Hour of Day are too arbitrary
to be weighing spam on.

- Original Message - 
From: "Mark Smith" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 19, 2004 4:02 PM
Subject: [Declude.JunkMail] DOW test and Spam on specific days


> Assuming we wanted to setup a Sat-Sun DOW test with a weight of 2 for 
> the message hitting on the weekend, I guess we would use:
>
> DOW dow 6 7 2 0
>
> Correct?
>
> Having said that, does anyone have any metrics on what days more spam
comes
> in?
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] DOW test and Spam on specific days

2004-10-19 Thread Scott Fisher
  Here are my October totals by day.

  Day spam totals Date CountOfMessageID DEL SPAM Held SPAM Poss SPAM OK
  10/1/2004 4513 2878 57 63 1515
  10/2/2004 3169 2915 51 9 194
  10/3/2004 2949 2665 57 17 210
  10/4/2004 4594 2898 39 42 1615
  10/5/2004 4811 3038 41 39 1693
  10/6/2004 5035 3193 34 36 1772
  10/7/2004 4661 3013 28 32 1588
  10/8/2004 4409 2941 28 16 1424
  10/9/2004 3188 2942 21 18 207
  10/10/2004 1898 1774 11 10 103
  10/11/2004 3235 1813 27 20 1375
  10/12/2004 4853 3057 43 48 1705
  10/13/2004 4946 3087 53 35 1771
  10/14/2004 5073 3150 27 34 1862
  10/15/2004 4781 3140 19 40 1582
  10/16/2004 2904 2659 16 9 220
  10/17/2004 2950 2660 20 12 258
  10/18/2004 4323 2787 32 45 1459


That said, my opinion is that Day of Week and Hour of Day are too arbitrary
to be weighing spam on.

- Original Message - 
From: "Mark Smith" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 19, 2004 4:02 PM
Subject: [Declude.JunkMail] DOW test and Spam on specific days


> Assuming we wanted to setup a Sat-Sun DOW test with a weight of 2 for the
> message hitting on the weekend, I guess we would use:
>
> DOW dow 6 7 2 0
>
> Correct?
>
> Having said that, does anyone have any metrics on what days more spam
comes
> in?
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] DOW test and Spam on specific days

2004-10-19 Thread Darin Cox
I believe Sunday is day zero, so you would need two tests.  For example...

DOW_SUN dow 0 0 2 0
DOW_SAT dow 6 6 2 0

I don't have statistics to show you, but I can say more spam comes in on a
weekday than on weekends, and more on Saturday than Sunday.  We weight
Sunday a little higher due to much less legit mail on Sunday.

Darin.


- Original Message - 
From: "Mark Smith" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 19, 2004 5:02 PM
Subject: [Declude.JunkMail] DOW test and Spam on specific days


Assuming we wanted to setup a Sat-Sun DOW test with a weight of 2 for the
message hitting on the weekend, I guess we would use:

DOW dow 6 7 2 0

Correct?

Having said that, does anyone have any metrics on what days more spam comes
in?


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] DOW test and Spam on specific days

2004-10-19 Thread Mark Smith
Assuming we wanted to setup a Sat-Sun DOW test with a weight of 2 for the
message hitting on the weekend, I guess we would use:

DOW dow 6   7   2   0

Correct?

Having said that, does anyone have any metrics on what days more spam comes
in?


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.