On Tue, Nov 23, 2004 at 03:14:18PM +0000, Ronan wrote: > 70_sare_adult.cf > 70_sare_bayes_poison_nxm.cf > 70_sare_genlsubj0.cf > 70_sare_header0.cf > 70_sare_html0.cf > 70_sare_oem.cf > 70_sare_random.cf > 70_sare_specific.cf > 70_sare_spoof.cf > 70_sare_unsub.cf > 70_sare_uri.cf > 72_sare_bml_post25x.cf > 72_sare_redirect_post3.0.0.cf > 99_sare_fraud_post25x.cf > chickenpox.cf > evilnumbers.cf > init.pre > local.cf
I run SA 3.0.1 with one extra URIBL, one extra custom module, 70_sare_header.cf and 70_sare_random.cf, some local spam and ham rules and I havn't had a spam score less than 10 in a while (my threshold) and no false positives. Look at my SA data for the past 2.5 to 3 days: SC # frequency -6 ( 19) ********** -4 ( 72) **************************************** -2 ( 124) ********************************************************************** 0 ( 36) ******************** 2 ( 4) ** 4 ( 6) *** 6 ( 1) 8 ( 1) 10 ( 0) 12 ( 0) 14 ( 2) * 16 ( 3) * 18 ( 13) ******* 20 ( 8) **** 22 ( 14) ******* 24 ( 9) ***** 26 ( 4) ** 28 ( 6) *** 30 ( 51) **************************** Got 110 spams mean = 31.15 stddev = 11.15 min = 14.50 max = 65.20 Got 263 hams mean = -2.48 stddev = 2.53 min = -12.60 max = 9.90 Got 373 alls mean = 7.44 stddev = 16.64 min = -12.60 max = 65.20 My setup works well with users that have their bayes db initialized and for those that do not, but it works a little better for those with bayes. I don't think that evilnumbers.cf or chickenbox.cf will give you anything in 3.x. Mike -- /-----------------------------------------\ | Michael Barnes <[EMAIL PROTECTED]> | | UNIX Systems Administrator | | College of William and Mary | | Phone: (757) 879-3930 | \-----------------------------------------/
