RE: [Declude.JunkMail] Spamchk fine tuning?
A couple of posters offered some help on this, where I don't have the original messages (they're at home and I'm at work). The FP rate is fairly heavy on spamchk so far... including bagging about half of the traffic on this list today. I'm sure its something easily fixed. The best way to fix this is to set the debuglevel to 9 and watch the logfile. Here you can see exactly why spamchk gives certain points based on your ini file. Keep in mind that we consider spamchk not as a simple test but as a group of content based tests that give the determined weight back to declude. So I highly recommend: 1.) use spamchk in a declude weighting system where actions are taken based on determined weights and not on the result of an individual test. 2.) adapt all points in the spamchk.ini-file to your declude weighting system 3.) add your own keywords with a negative weight to your [checkwords] section. (for example: spammers can't know certain local situations like citiy-names and phone prefixes) Keep also in mind that not all parameters in the ini file are points. There are also certain values to configure the number of appearance of certain characters or spam properties. -- Thanks for pointing out a problem with the subscribe link but if I try to use the link on http://www.spamchk.com/modules.php?name=Newsfile=articlesid=2 this seems to work. Can't see any error. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamchk fine tuning?
Thanks Markus. I am using SpamChk with about 70 other tests. One thing that helped solve the fp problem was going to your weight 100 scheme. By adding a zero to every weight it brought spamchk's results into proportion with everything else. I didn't want to mess with the config for precisely the reason you point out; some stuff was clearly threshold values and not weights, but I wasn't 100% on what was what and didn't want to break it. Here are the headers from one of the error messages your list server threw. The mails had no content. Only the subject you see here. I got subscribed just fine with the other link you sent me. It appears that this other link doesn't ask for my name, as that's the only diff I saw between the two links. Received: from mail.spamchk.com [217.199.0.33] by msb1.mysecretbase.net with ESMTP (SMTPD32-8.02) id A58B4050086; Tue, 02 Dec 2003 09:02:03 -0800 Date: Tue, 2 Dec 2003 17:59:15 +0100 Message-Id: [EMAIL PROTECTED] From: [EMAIL PROTECTED] (List Server) To: [EMAIL PROTECTED] Subject: Invalid Syntax! X-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 4. X-Declude-Sender: [EMAIL PROTECTED] [217.199.0.33] X-Declude-Spoolname: Dc58b04050086dd14.SMD X-Note: This E-mail was sent from ns1.zcom.it ([217.199.0.33]). X-Note: This E-mail was scanned by MSB Designs Inc. Anti-Spam Services. X-Spam-Tests-Failed: IPNOTINMX, NOLEGITCONTENT, SPAMCHK X-Spam-Message-Weight: 4 X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 369357513 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamchk fine tuning?
Here are the headers from one of the error messages your list server threw. The mails had no content. Only the subject you see here. I got subscribed just fine with the other link you sent me. It appears that this other link doesn't ask for my name, as that's the only diff I saw between the two links. Yes, you're right. Imails listserver expects a name after the subscribe list command Subscribe [listname] [yourname] in the body should work fine. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spamchk fine tuning?
I just set up spamchk and was wondering if anyone can share some fine-tuning info with me? Updated keyword lists and such? I tried subscribing to their list but all I get back is an Invalid Syntax email from their mail server. Cheers, Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamchk fine tuning?
Matt: At what weights do you hold and delete? I will share my config file with you with the caveat that I am still fine tuning. I have been running Spamchk in production mode for about a month and have had excellant results. I turned it off for a day when I was trying to reduce some of the false positives and I received comments from customers that they noticed something had changed so I turned it back on. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Robertson Sent: Tuesday, December 02, 2003 10:03 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Spamchk fine tuning? I just set up spamchk and was wondering if anyone can share some fine-tuning info with me? Updated keyword lists and such? I tried subscribing to their list but all I get back is an Invalid Syntax email from their mail server. Cheers, Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spamchk fine tuning?
Matt - What I did was in the beta version set a max weight and a min weight to be returned. [I have it set now at 8 and -2 respectivly.] Then let it run and check the log file to see what is failing - adjust accordingly. I ended up reducing the scores for failures in the ini by ~50+% since I hold on 15 and delete on 30. -Nick From: Matt Robertson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject:[Declude.JunkMail] Spamchk fine tuning? Date sent: Tue, 2 Dec 2003 09:03:18 -0800 Send reply to: [EMAIL PROTECTED] I just set up spamchk and was wondering if anyone can share some fine-tuning info with me? Updated keyword lists and such? I tried subscribing to their list but all I get back is an Invalid Syntax email from their mail server. Cheers, Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamchk fine tuning?
I just set up spamchk and was wondering if anyone can share some fine-tuning info with me? Updated keyword lists and such? I tried subscribing to their list but all I get back is an Invalid Syntax email from their mail server. hmm... I've tried to un- and the subscribe without any problem. Try to go on www.spamchk.com and click on the subscribe-link in the center of the page. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamchk fine tuning?
Markus wrote: hmm... I've tried to un- and the subscribe without any problem. Thats because you're using the link that works :-O. Go to the installation instructions here http://www.spamchk.com/modules.php?name=Newsfile=articlesid=2 And try the subscribe link on that page. You'll get a nastygram rather than a subscription :-). Just tried the link you sent and it gave me a different format. I'm sure thats the problem. Thx! -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamchk fine tuning?
A couple of posters offered some help on this, where I don't have the original messages (they're at home and I'm at work). The FP rate is fairly heavy on spamchk so far... including bagging about half of the traffic on this list today. I'm sure its something easily fixed. I'd love to see a config file AND see what exactly the penalty weight spots are so I can halve them (its not clear to me sometimes whether I'm looking at a penalty weight or a thresahold on some things). I understand nobody has perfect answers. Just looking for a leg up on the learning curve. Cheers, -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
