Chris wrote:
> On Tuesday 05 August 2008 2:06 am, Dirk Bonengel wrote:
> > >
> > > Hi Dirk, I've been using it on my home system probably ever since
> > > you made it available. Below are hit stats from yesterday:
> > >
> > > Total: 279
> > > Ham: 122
> > > Spam: 157
> > >
> > > iXhash.cf:
> > > Rule Name Score Ham Spam %of
> > > Ham %of Spam
> > >
> > >
-----------------------------------------------------------------------
> > > LOGINHASH 4.50 30 62
> > > 24.59% 39.49%
> > > LOGINHASH2 2.50 30 61
> > > 24.59% 38.85%
> > > IXHASH 2.50 31 66
> > > 25.41% 42.04%
> > >
> > >
-----------------------------------------------------------------------
> > > OVERALL 31 66
> > > 25.41% 42.04%
> > >
> > > Though it does hit ham, I don't remember ever seeing any FP's
> > > because of it. I'd say expand it, though again, this is just
> > > running on a home system
>
> >
> > Chris,
> >
> > from my experience there must be something wrong with your setup.
> > From the feedback I got thus far the plugin is quite accurate where
> > FPs are concerned. Thus the relatively high scores I set in the
> > default config. I'd recommend having a look at your DNS setup -
> > maybe your provider returns false results. Using OpenDNS e.g. has
> > caused such high FP rates in the past. Let me know if I can help.
> >
> > Dirk
>
> Dirk, using the sa-addon's script for these stats I'm not sure how
> many days back the count above is from. For instance the stats were
> drawn last night from this count:
>
> Ham: 132
> Spam: 158
>
> Yesterday my message count was as below:
>
> Spam: 19
> Ham: 13
>
> So it's possible this could be over a 10 day period, I'm not really
> sure. However, when I get home from work today I will look and see
> what kind of ham is being hit by it. Up until a few days ago I was
> just using a locally cached nameserver, however I've switched to
> OpenDNS since last Sunday. I'll give my ISP's nameserver a try and
> see what happens.

If you are using my sa-addon-stats.pl program, it defaults to getting
information from /var/log/maillog. So the period depends on when you
last rotated the log file.

--
Bowie