If someone is interested in this:
Based on tests
we've added one per one in the last weeks we can make some considerations and
are also interested on comments or corrections.
In the following diagramm you can see:
- in light orange the number of total incoming msgs per day on our server
- in dark orange the number of spams catched be declude junkmail
- in blue the ratio between total-in and catched msgs (due to non constant in-msgs values)
If I've interpreted all right I can consider:
- increase the default values for the tests in the
declude.cfg to 10% (or decrease the hold value from 20 to 18 points)
As you can see this simple change has increased the detections imediatly on 23.October - Use the two blacklist provided and daily updated
by Image'fx (www.imagefxonline.net/apps/delog)
After the 20.Nov we've added this two tests and noticed a striking increase of detected spams. - Adding the populardomains-test on 11.Dec we've noticed another noticeable improvement but have had also one single false positive from around 130 catched spams. So we've decreased the weight to 30% of the hold value to avoid false positives. Unfortunately also the detection rate decreased but was furthermore good. (for more info see http://www.mail-archive.com/cgi-bin/htsearch?config=declude_junkmail_declude_com&restrict=&exclude=&words=populardomains)
I think junkmail today is one of the best weapon
against spam.
Based on them and adding this 3 very ressource friendly blacklists we was
able to increase the detection rate to (I mean) a very good value.
I'm interested in any corrections for this report or other considerations
to improve the detection rate.
Markus
