>you recommend that emails blocked because of SPF, PTR, and HELO go
into 'discarded' instead of the 'SPAM' folder
Yes, only to fill up the corpus at the very begining more quickly use the
header based and IP checks. At least this depend on the message count per
day - if you get too less 'normal' spam to keep your corpus at a fine
level, you must use some or all of these checks to collect spams.
But if your corpus is too spam havy - this is one way to reduce the spam
mails in the corpus.
If the corpus is too ham havy - most times outgoing mails are collected in
the corpus - or simply collect (report) more spams.
There is no general recommendation how to keep your corpus confident - and
possibly you must switch from time to time from one to another stategy.
The best way for me is to 'report' spam/ham - or to simply move some known
good/bad files to the 'errors/..' folders and to keep the spam/notspam
folder as small as possible,
for example to only reflect the last 10 or 14 days . Because most times
the spam is the same - new spams are reported quickly and the latest
spammers behavior changes are most times in the spam folder.
But I have a big advantage - I've got two domains that get (known) 100%
spam for some hundreds accounts. This makes it easy. Every spam that was
not detected (3 per week) by assp will be automaticaly reported as spam
one second later. My 'problem' is, that I don't get enough ham mails
(related to spam) - so I move the most of them to the long term corpus -
there they get a four times higher weight..
Huuuu.. I'm talking about corpus problems ??? my corpus confidence is
between 0.92 and 1.08 since over a year now.
Thomas
Von: "Hill, Brett" <[email protected]>
An: "ASSP development mailing list" <[email protected]>
Datum: 10.05.2012 14:47
Betreff: Re: [Assp-test] Antwort: Re: Antwort: Ham-heavy corpus
> Try to change your collection settings - possibly you collect spams
to the
> corpus where it is better to store mails in to 'discarded' (eg SPF,
PTR, HELO
> ...).
So, you recommend that emails blocked because of SPF, PTR, and HELO go
into 'discarded' instead of the 'SPAM' folder? Or was that just
throwing something out there for him to try?
Kind Regards,
Brett
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
