Sorry I can't offer solutions to improve your detection rate. But I am interested in how you prepared your graphs, if you don't mind sharing.
dhardison -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Markus Gufler Sent: Monday, December 23, 2002 6:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Spam Report If someone is interested in this: Based on tests we've added one per one in the last weeks we can make some considerations and are also interested on comments or corrections. In the following diagramm you can see: in light orange the number of total incoming msgs per day on our server in dark orange the number of spams catched be declude junkmail in blue the ratio between total-in and catched msgs (due to non constant in-msgs values) If I've interpreted all right I can consider: increase the default values for the tests in the declude.cfg to 10% (or decrease the hold value from 20 to 18 points) As you can see this simple change has increased the detections imediatly on 23.October Use the two blacklist provided and daily updated by Image'fx (www.imagefxonline.net/apps/delog) After the 20.Nov we've added this two tests and noticed a striking increase of detected spams. Adding the populardomains-test on 11.Dec we've noticed another noticeable improvement but have had also one single false positive from around 130 catched spams. So we've decreased the weight to 30% of the hold value to avoid false positives. Unfortunately also the detection rate decreased but was furthermore good. (for more info see http://www.mail-archive.com/cgi-bin/htsearch?config=declude_junkmail_declude _com&restrict=&exclude=&words=populardomains) I think junkmail today is one of the best weapon against spam. Based on them and adding this 3 very ressource friendly blacklists we was able to increase the detection rate to (I mean) a very good value. I'm interested in any corrections for this report or other considerations to improve the detection rate. Markus --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.431 / Virus Database: 242 - Release Date: 12/17/2002 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
