Changes

From SME Server
Jump to navigationJump to search

DSPAM (view source)

Revision as of 17:32, 4 January 2010

3,444 bytes added ,  17:32, 4 January 2010
no edit summary
Line 35: Line 35:  
==Configuration==
 
==Configuration==
   −
The contrib initially does DSPAM training and will continue to do so until DSPAM claims that training is complete. It monitors the output of "dspam_stats -H" to see when training has completed and will then switch to scoring/tagging mode. When training is complete the admin will receive an email notification. Until it received this mode you will not see any DSPAM benefits. When it starts scoring you can see the dspam qpsmtpd plugin in actions by tailing the log.
+
The contrib initially does DSPAM training and will continue to do so until DSPAM claims that training is complete. It monitors the output of "dspam_stats -H" to see when training has completed and will then switch to scoring/tagging mode. When training is complete the admin will receive an email notification. Until it received this mode you will not see any DSPAM benefits.  
−
 
  −
tail -f /var/log/qpsmtpd/current | tai64nlocal | grep -i dspam
      
The training of DSPAM is done based on SpamAssassin scores and by default it will train as SPAM if SpamAssassin rejects the email and score is above 9. It will train as ham (DSPAM terminology innocent) when mail is scores lower than 5 by SpamAssassin.
 
The training of DSPAM is done based on SpamAssassin scores and by default it will train as SPAM if SpamAssassin rejects the email and score is above 9. It will train as ham (DSPAM terminology innocent) when mail is scores lower than 5 by SpamAssassin.
Line 49: Line 47:     
  signal-event email-update
 
  signal-event email-update
−
 
+
 
==Statistics==
 
==Statistics==
   Line 68: Line 66:  
                 OCA Overall Accuracy:            97.16%
 
                 OCA Overall Accuracy:            97.16%
    +
 +
When contrib is in training mode you should see the following type of event in your qpsmptd log when issuing the command:
 +
 +
tail -f /var/log/qpsmtpd/current | tai64nlocal | grep dspam
 +
 +
2010-01-04 16:05:43.495837500 24369 dspam plugin: Training email as spam (32.3 > 9)
 +
2010-01-04 16:06:12.922243500 24460 dspam plugin: Training email as spam (26.2 > 9)
 +
2010-01-04 16:08:30.707928500 24571 dspam plugin: Training email as spam (40.2 > 9)
 +
2010-01-04 16:15:09.209315500 25154 dspam plugin: Training email as spam (28.7 > 9)
 +
2010-01-04 16:15:12.657721500 25093 dspam plugin: Training email as innocent (-2.3 < 5)
 +
2010-01-04 16:15:31.505187500 25230 dspam plugin: Training email as innocent (1.0 < 5)
 +
2010-01-04 16:15:56.084894500 25261 dspam plugin: Training email as spam (33.2 > 9)
 +
2010-01-04 16:16:35.734852500 25302 dspam plugin: Training email as innocent (0.1 < 5)
 +
2010-01-04 16:16:37.373583500 25297 dspam plugin: Training email as spam (39.5 > 9)
 +
2010-01-04 16:17:50.398104500 25284 dspam plugin: Training email as spam (30.2 > 9)
 +
2010-01-04 16:18:13.514300500 25412 dspam plugin: Training email as spam (23.2 > 9)
 +
2010-01-04 16:18:41.653611500 25396 dspam plugin: Training email as spam (35.2 > 9)
 +
2010-01-04 16:20:05.432484500 25486 dspam plugin: Training email as spam (24.6 > 9)
 +
2010-01-04 16:20:07.036783500 25528 dspam plugin: Training email as innocent (1.7 < 5)
 +
2010-01-04 16:21:04.378237500 25766 dspam plugin: Training email as innocent (1.0 < 5)
 +
2010-01-04 16:21:21.849091500 25797 dspam plugin: Training email as innocent (-2.6 < 5)
 +
2010-01-04 16:22:32.693008500 25860 dspam plugin: Training email as spam (30.3 > 9)
 +
2010-01-04 16:28:22.610804500 26245 dspam plugin: Training email as spam (24.3 > 9)
 +
 +
When contrib is in tagging mode you can see the following type of output from the command:
 +
 +
tail -f /var/log/qpsmtpd/current | tai64nlocal | grep dspam
 +
 +
2010-01-04 16:14:27.830989500 21955 dspam plugin: dspam result: Spam with Confidence of 0.99 and Probability of 1.0000 (4b4205d3219672044083174)
 +
2010-01-04 16:15:57.446155500 22065 dspam plugin: dspam result: Spam with Confidence of 0.99 and Probability of 1.0000 (4b42062d220731786917372)
 +
2010-01-04 16:20:55.422770500 22430 dspam plugin: dspam result: Spam with Confidence of 0.99 and Probability of 1.0000 (4b420757224401732614111)
 +
2010-01-04 16:21:05.836167500 22453 dspam plugin: dspam result: Innocent with Confidence of 0.99 and Probability of 0.0000 (4b420761224588618216848)
 +
2010-01-04 16:21:20.033604500 22330 dspam plugin: dspam result: Spam with Confidence of 0.80 and Probability of 1.0000 (4b420770224877713217748)
 +
2010-01-04 16:24:41.615738500 22636 dspam plugin: dspam result: Innocent with Confidence of 0.76 and Probability of 0.0000 (4b420839226414726512081)
 +
2010-01-04 16:24:43.453742500 22636 dspam plugin: Retraining email as spam classification (14.9 > 9)
 +
2010-01-04 16:25:34.647693500 22729 dspam plugin: dspam result: Spam with Confidence of 0.99 and Probability of 1.0000 (4b42086e227377747245261)
 +
2010-01-04 16:25:38.648186500 22743 dspam plugin: dspam result: Spam with Confidence of 0.99 and Probability of 1.0000 (4b420872227551892345671)
 +
2010-01-04 16:26:04.702731500 22773 dspam plugin: dspam result: Innocent with Confidence of 1.00 and Probability of 0.0000 (4b42088c227818922614116)
 +
2010-01-04 16:26:06.441017500 22770 dspam plugin: dspam result: Spam with Confidence of 0.99 and Probability of 1.0000 (4b42088e227882615116573)
 +
 +
Notice the retraining of DSPAM that took place after a DSPAM classification as Innocent but with a total SpamAssassin score of 14.9
    
==FAQ==
 
==FAQ==
Knuddi
177

edits

Retrieved from "https://wiki.koozali.org/Special:MobileDiff/13942"

Navigation menu