I apologize for taking so long to reply but here it finally is. I have
been aggressively training since my last email over a month ago and
while I haven't had a single false positive, I still get a lot of spam
which is often the same type I keep retraining. I have my preferences
set to block as much as possible during the training period. Here are
some personal stats regarding catchrate and missrate. Thankfully I don't
have much training left and I'm hoping once training is finished it gets
drastically more effective.
SPAM messages Good messages
Since last reset 387 missed 0 missed
264 caught 1982 delivered
40.553% caught 0.000% missed
Total processed by filter 387 missed 0 missed
264 caught 1984 delivered
From corpus 0 fed 0 fed
>dspam_stats -H -t
TOTAL:
TP True Positives: 264
TN True Negatives: 2112
FP False Positives: 0
FN False Negatives: 387
SC Spam Corpusfed: 0
NC Nonspam Corpusfed: 0
TL Training Left: 388
SHR Spam Hit Rate 40.55%
HSR Ham Strike Rate: 0.00%
PPV Positive predictive value: 100.00%
OCA Overall Accuracy: 85.99%
>dspam --version
DSPAM Anti-Spam Suite 3.10.2 (agent/library)
Home /var/spool/dspam
StorageDriver /usr/lib/x86_64-linux-gnu/dspam/libpgsql_drv.so
TrustedDeliveryAgent "/usr/bin/procmail"
DeliveryHost 127.0.0.1
DeliveryPort 10034
DeliveryIdent localhost
DeliveryProto SMTP
OnFail error
Trust root
Trust dspam
Trust www-data
Trust mail
Trust daemon
Trust amavis
Trust postfix
Trust vmail
Debug *
TrainingMode teft
TestConditionalTraining on
Feature whitelist
Algorithm graham burton
Tokenizer osb
PValue bcr
WebStats on
Preference "trainingMode=TEFT" # { TOE | TUM | TEFT | NOTRAIN } ->
default:teft
Preference "spamAction=tag" # { quarantine | tag | deliver } ->
default:quarantine
Preference "spamSubject=[SPAM]" # { string } -> default:[SPAM]
Preference "statisticalSedation=5" # { 0 - 10 } -> default:0
Preference "enableBNR=on" # { on | off } -> default:off
Preference "enableWhitelist=on" # { on | off } -> default:on
Preference "signatureLocation=message" # { message | headers } ->
default:message
Preference "tagSpam=off" # { on | off }
Preference "tagNonspam=off" # { on | off }
Preference "showFactors=off" # { on | off } -> default:off
Preference "optIn=off" # { on | off }
Preference "optOut=off" # { on | off }
Preference "whitelistThreshold=10" # { Integer } -> default:10
Preference "makeCorpus=off" # { on | off } -> default:off
Preference "storeFragments=off" # { on | off } -> default:off
Preference "localStore=" # { on | off } -> default:username
Preference "processorBias=on" # { on | off } -> default:on
Preference "fallbackDomain=off" # { on | off } -> default:off
Preference "trainPristine=off" # { on | off } -> default:off
Preference "optOutClamAV=off" # { on | off } -> default:off
Preference "ignoreRBLLookups=off" # { on | off } -> default:off
Preference "RBLInoculate=off" # { on | off } -> default:off
Preference "notifications=off" # { on | off } -> default:off
AllowOverride enableBNR
AllowOverride enableWhitelist
AllowOverride fallbackDomain
AllowOverride ignoreGroups
AllowOverride ignoreRBLLookups
AllowOverride localStore
AllowOverride makeCorpus
AllowOverride optIn
AllowOverride optOut
AllowOverride optOutClamAV
AllowOverride processorBias
AllowOverride RBLInoculate
AllowOverride showFactors
AllowOverride signatureLocation
AllowOverride spamAction
AllowOverride spamSubject
AllowOverride statisticalSedation
AllowOverride storeFragments
AllowOverride tagNonspam
AllowOverride tagSpam
AllowOverride trainPristine
AllowOverride trainingMode
AllowOverride whitelistThreshold
AllowOverride dailyQuarantineSummary
AllowOverride notifications
Lookup zen.spamhaus.org
Lookup bl.spamcop.net
Notifications on
PurgeSignatures 14 # Stale signatures
PurgeNeutral 90 # Tokens with neutralish probabilities
PurgeUnused 90 # Unused tokens
PurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes)
PurgeHits1S 15 # Tokens with only 1 spam hit
PurgeHits1I 15 # Tokens with only 1 innocent hit
LocalMX 127.0.0.1
SystemLog on
UserLog on
Opt in
ServerHost 127.0.0.1
ServerPort 2424
ServerQueueSize 32
ServerPID /var/run/dspam/dspam.pid
ServerMode auto
ServerParameters "--deliver=innocent -d %u"
ProcessorURLContext on
ProcessorBias on
StripRcptDomain off
GroupConfig /var/spool/dspam/group
Include/etc/dspam/dspam.d/
I have ignoreheaders.conf in dspam.d and you can view that entire list
at http://pastebin.com/WxkHXFNh.
Kind regards,
Elvar
On 6/5/2013 4:39 PM, Paul Cockings wrote:
> Hi Elvar,
>
> I wonder if you could post your dspam conf and add more description
> about your setup? Also the output from 'dspam --version' would be helpful.
>
>
>
> Elvar <[email protected]> wrote:
>
> On 6/5/2013 1:44 PM, Elvar wrote:
>
> Hello, I've had dspam running for about a week now and while
> it is catching some spam, I find that despite training the
> same spam emails over and over they keep getting through. How
> many times will I have to retrain similar spam emails before
> it blocks them consistently? Kind regards, Elvar
>
>
>
> I forgot to mention, I have the filtering preferences turned all the way
> up to catch as much spam as possible.
>
> Thanks,
> Elvar
>
> ------------------------------------------------------------------------
>
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Dspam-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspam-user
