|
Hello, You will find my top rules fired with spamassassin. I have spamassassin on several boxes, each have his own bayes_db files, I use razor, dcc_check, uribl, bayes .... We have hundreds of thousand messages per day. In my top rules for spam you will see a lot of "collaborative rules" like razor,uribl,dcc_check. I wonder why there isn't more heuristic and bayesian rules in my top. Do you think that my stats seem to be "normal" or is there something wrong ? Any suggestions are welcome. Here my top rules: TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RDNS_NONE 48417 99.60 99.82 99.41 2 RAZOR2_CHECK 42113 42.50 86.82 2.88 3 RAZOR2_CF_RANGE_51_100 41657 41.46 85.88 1.75 4 URIBL_BLACK 41376 41.43 85.30 2.22 5 RAZOR2_CF_RANGE_E8_51_100 39016 38.41 80.44 0.85 6 URIBL_JP_SURBL 38221 37.21 78.80 0.05 7 URIBL_OB_SURBL 32588 32.22 67.18 0.97 8 URIBL_SC_SURBL 30849 30.03 63.60 0.02 9 DCC_CHECK 27472 28.92 56.64 4.14 10 URIBL_AB_SURBL 26134 25.43 53.88 0.00 11 HTML_MESSAGE 25531 60.93 52.63 68.35 12 URIBL_WS_SURBL 23317 22.94 48.07 0.48 13 DIGEST_MULTIPLE 23267 22.74 47.97 0.20 14 URIBL_RHS_DOB 17797 17.42 36.69 0.20 15 RAZOR2_CF_RANGE_E4_51_100 16500 16.55 34.02 0.94 16 BAYES_50 13772 14.69 28.39 2.44 17 RCVD_IN_BL_SPAMCOP_NET 13594 13.48 28.03 0.48 18 BAYES_99 11330 11.06 23.36 0.07 19 FORGED_MUA_OUTLOOK 9043 8.86 18.64 0.11 20 STOX_REPLY_TYPE 8199 8.21 16.90 0.43 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 RDNS_NONE 53945 99.60 99.82 99.41 2 BAYES_00 43583 45.21 5.94 80.31 3 HTML_MESSAGE 37089 60.93 52.63 68.35 4 MIME_HTML_ONLY 10131 16.80 14.71 18.67 5 MIME_QP_LONG_LINE 4754 5.78 2.45 8.76 6 URIBL_GREY 3498 5.88 5.26 6.45 7 HTML_IMAGE_RATIO_02 3053 3.82 1.79 5.63 8 SUBJ_ALL_CAPS 2796 3.26 1.14 5.15 9 SUBJECT_NEEDS_ENCODING 2520 2.77 0.68 4.64 10 DCC_CHECK 2248 28.92 56.64 4.14 11 MSGID_MULTIPLE_AT 2212 2.16 0.02 4.08 12 INVALID_DATE 2130 4.26 4.63 3.93 13 HTML_MIME_NO_HTML_TAG 1889 2.41 1.21 3.48 14 MPART_ALT_DIFF 1744 2.66 2.04 3.21 15 MIME_HTML_MOSTLY 1580 1.84 0.65 2.91 16 RAZOR2_CHECK 1564 42.50 86.82 2.88 17 UNPARSEABLE_RELAY 1563 1.78 0.55 2.88 18 EXTRA_MPART_TYPE 1557 2.04 1.11 2.87 19 HTML_IMAGE_RATIO_04 1455 2.17 1.59 2.68 20 BAYES_50 1325 14.69 28.39 2.44 ---------------------------------------------------------------------- Thanks in advance. Seb. |
- Fired rules stats understanding Sébastien AVELINE
- Re: Fired rules stats understanding Matt Kettler
- Re: Fired rules stats understanding Sébastien AVELINE
