On 09.05.2012 05:23, Tim Streit wrote:
> Stevan,
Hello Tim,
> Here was the goods from your email from a few hours ago :
>
> X-DSPAM-Result: Spam
> X-DSPAM-Processed: Tue May 8 18:11:59 2012
> X-DSPAM-Confidence: 0.4821
> X-DSPAM-Improbability: 1 in 94 chance of being ham
> X-DSPAM-Probability: 0.9921
> X-DSPAM-Signature: 1,4fa9a83f269342116717032
>
> I am using the configuration that you'd help me setup- do you think that
> I need to adjust any 'threshold' or whatever?
are you telling me that you get to many mails marked as Spam (aka: false
positive)?
If I look at the statistics from the other mail you sent:
dspam:
TP True Positives: 1073
TN True Negatives: 2153
FP False Positives: 3
FN False Negatives: 1275
SC Spam Corpusfed: 25
NC Nonspam Corpusfed: 0
TL Training Left: 344
SHR Spam Hit Rate 45.70%
HSR Ham Strike Rate: 0.14%
PPV Positive predictive value: 99.72%
OCA Overall Accuracy: 71.63%
Then I see that you are still in training mode (344 left). So you could
either wait till those 344 are down to zero or you can change the
training buffer to a higher value to work around the high false positive
rate.
In dspam.conf increase the value of "Feature tb=n" to a higher value.
Usually n is 5.
After you are out of training mode (aka TL is zero) then you can use the
preference "statisticalSedation" to water down the false positive rate.
But you know what? I think you followed my example of creating a MERGED
group but I see that you use a SHARED group. So this is not the same and
therefore my posted preferences for the MERGED group are not optimal for
a SHARED group. Could you please post the output of the following command?
# dspam_admin list preferences dspam
> Thanks,
--
Kind Regards from Switzerland,
Stevan Bajić
>
> On 05/08/2012 06:11 PM, Stevan Bajić wrote:
>> On 08.05.2012 18:37, Tim Streit wrote:
>>> Greetings,
>> Hello Tim,
>>
>>
>>> I've been using DSPAM on incoming mail (after Stevan helping me to get
>>> it going), and I can see by the stats it is definately training. Its
>>> been about 3 days or so, and here are my stats thus far :
>>>
>>> dspam:
>>> TP True Positives: 1073
>>> TN True Negatives: 2153
>>> FP False Positives: 3
>>> FN False Negatives: 1275
>>> SC Spam Corpusfed: 25
>>> NC Nonspam Corpusfed: 0
>>> TL Training Left: 344
>>> SHR Spam Hit Rate 45.70%
>>> HSR Ham Strike Rate: 0.14%
>>> PPV Positive predictive value: 99.72%
>>> OCA Overall Accuracy: 71.63%
>>>
>>> I can see where it is beginning to catch spam, but my users are also
>>> complaining about all the spam they are receiving.
>> What do you mean with 'all the spam they are receiving'? They complain
>> that they receive spam? They complain that they receive false
>> positive/negative? What do you mean?
>>
>>> I am using TOE mode,
>>> which I know is good, but how long (typically) should it take to get
>>> that overall accuracy up into an efficient level?
>> If you want fast to get on a efficient level then you should strongly
>> consider to use a global merged group. If you take the time to read the
>> mail conversation from the last two or three weeks then you will find
>> detailed instructions how to setup that.
>>
>>
>>> Thanks,
>>>
>>> ------------------------------------------------------------------------------
>>> Live Security Virtual Conference
>>> Exclusive live event will cover all the ways today's security and
>>> threat landscape has changed and how IT managers can respond. Discussions
>>> will include endpoint security, mobile security and the latest in malware
>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>> _______________________________________________
>>> Dspam-user mailing list
>>> Dspam-user@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/dspam-user
>>>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Dspam-user mailing list
> Dspam-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/dspam-user
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user
