Until now there was no tool or script to generate this report. At first you need domlist.exe to generate a daily report of your smtp-logfile. (you can find it on the declude homepage)
I've created just now a short vbscript that parses the in_msgs value
from this report file.
The script counts also the files in the spam (or if you use spamreview:
spam/hold) -directory.
Yes I know there should be a faster way to count this files, but in this
short time I wasn't able to find a description how to use the findfile
api.
At last the script saves the results in a CSV-file.
I've created this script just now and have tested it only on my server.
So please consider it as alpha release and my little gift for christmas
;-)
Open the file with an editor an change the variables in the first
section to your needs. Then you can call the script:
c:\your_directory\cscript spam_report.vbs
With the data in the csv-file you should be able to generate reports as
you want (excel, asp-pages, ...)
Probably there is something on this list who's able to code this in a
small and faster application.
Markus
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of
> Douglas Hardison
> Sent: Monday, December 23, 2002 5:26 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Spam Report
>
>
> Sorry I can't offer solutions to improve your detection rate.
> But I am interested in how you prepared your graphs, if you
> don't mind sharing.
>
> dhardison
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Markus Gufler
> Sent: Monday, December 23, 2002 6:57 AM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Spam Report
>
>
> If someone is interested in this:
> Based on tests we've added one per one in the last weeks we
> can make some considerations and are also interested on
> comments or corrections. In the following diagramm you can
> see: in light orange the number of total incoming msgs per
> day on our server in dark orange the number of spams catched
> be declude junkmail in blue the ratio between total-in and
> catched msgs (due to non constant in-msgs values)
>
> If I've interpreted all right I can consider:
> increase the default values for the tests in the declude.cfg
> to 10% (or decrease the hold value from 20 to 18 points) As
> you can see this simple change has increased the detections
> imediatly on 23.October Use the two blacklist provided and
> daily updated by Image'fx
> (www.imagefxonline.net/apps/delog)
> After the 20.Nov we've added this two tests and noticed a
> striking increase of detected spams. Adding the
> populardomains-test on 11.Dec we've noticed another
> noticeable improvement but have had also one single false
> positive from around 130 catched spams. So we've decreased
> the weight to 30% of the hold value to avoid false positives.
> Unfortunately also the detection rate decreased but was
> furthermore good. (for more info see
> http://www.mail-archive.com/cgi-bin/htsearch?config=declude_ju
nkmail_declude
_com&restrict=&exclude=&words=populardomains)
I think junkmail today is one of the best weapon against spam. Based on
them and adding this 3 very ressource friendly blacklists we was able to
increase the detection rate to (I mean) a very good value.
I'm interested in any corrections for this report or other
considerations to improve the detection rate.
Markus
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.431 / Virus Database: 242 - Release Date: 12/17/2002
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
spam_report.zip
Description: Zip compressed data
