You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Dirk Bonengel <di...@gmx.de> on 2008/08/04 23:13:29 UTC
iXhash plugin and lists - feedback wanted
Hi all,
I'm the author of the iXhash plugin, a piece of code that computes a
variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
by the German IT magazine iX).
I also run two DNS zones
(nospam.login-solutions.de,nospam.login-solutions.ag), containing fuzzy
checksum data from various spam traps.
Now, I'll leave my current job where I had the opportunity to run a
dedicated server to maintain the lists.
I wonder if it it is worth my while to actually migrate to whole stuff
(and expand it to contain data from other sources) or to just release a
final version of the plugin and call it quits.
I guess this list is the best place to ask those of you who use the
plugin for feedback. I'd appreciate any comments and information an hit
rates, FPs and such
Thanks in advance
Dirk
Re: iXhash plugin and lists - feedback wanted
Posted by Dirk Bonengel <di...@gmx.de>.
Vidar Tyldum Hansen schrieb:
> On Sat, Sep 27, 2008 at 05:27:52PM +0200, Vidar Tyldum Hansen wrote:
>
>> On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote:
>>
>>> Hi all,
>>>
>>> I'm the author of the iXhash plugin, a piece of code that computes a
>>> variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
>>> by the German IT magazine iX).
>>>
>> I would like to express my appreciation of your work.
>>
>
> Also, I would like to hit my head against my desk for about an hour.
> Messed the sorting in Mutt and failed to notice the date on the
> origiginal message.
>
> Apologies to the list :)
>
>
Well, your appreciation was, er, appreciated nevertheless ;-)
Dirk
Re: iXhash plugin and lists - feedback wanted
Posted by Vidar Tyldum Hansen <vi...@mail.tyldum.com>.
On Sat, Sep 27, 2008 at 05:27:52PM +0200, Vidar Tyldum Hansen wrote:
> On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote:
> > Hi all,
> >
> > I'm the author of the iXhash plugin, a piece of code that computes a
> > variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
> > by the German IT magazine iX).
>
> I would like to express my appreciation of your work.
Also, I would like to hit my head against my desk for about an hour.
Messed the sorting in Mutt and failed to notice the date on the
origiginal message.
Apologies to the list :)
--
Vidar Tyldum Hansen
Re: iXhash plugin and lists - feedback wanted
Posted by Adam Stephens <ad...@bristol.ac.uk>.
Yet Another Ninja wrote:
>>> I guess this list is the best place to ask those of you who use the
>>> plugin for feedback. I'd appreciate any comments and information an
>>> hit rates, FPs and such
>>
>> Stats for the last 12 hours:
>>
>> 70% hitrate on spam.
>> 0,1% hitrate on ham.
>>
>> 3000 emails in corpus.
>>
>
> 0.1% HAM hits seems unusually high.
> would you please check what kind of hams these are?
>
> are they newsletter/bulk or empty messages with attachements, other
> types?
>
>
>
>
I'm seeing very large FP rates from the CTYME server,
today:
Spam: 66
Ham: 121 of which
Messages with negative SA scores: 78
or Friday:
Spam: 386
Ham: 409 of which
Messages with negative SA scores: 167
Most of the 'ham' messages only trigger CTYME_IXHASH and whitelisting
rules. Practically none of them trigger other message digest, DNS or URI
checks.
The other servers have trivial FP rates, though.
--
--------------------------------
Adam Stephens
Network Specialist - Email & DNS
adam.stephens@bristol.ac.uk
Re: iXhash plugin and lists - feedback wanted
Posted by Vidar Tyldum Hansen <vi...@mail.tyldum.com>.
On Mon, Sep 29, 2008 at 03:40:08PM +0200, Yet Another Ninja wrote:
> On 9/27/2008 5:27 PM, Vidar Tyldum Hansen wrote:
>> On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote:
>>> Hi all,
>>>
>>> I'm the author of the iXhash plugin, a piece of code that computes a
>>> variety of 'fuzzy checksums' along the lines of the NiXSpam project
>>> (run by the German IT magazine iX).
>>
>> I would like to express my appreciation of your work.
>>
>>> I guess this list is the best place to ask those of you who use the
>>> plugin for feedback. I'd appreciate any comments and information an
>>> hit rates, FPs and such
>>
>> Stats for the last 12 hours:
>>
>> 70% hitrate on spam.
>> 0,1% hitrate on ham.
>>
>> 3000 emails in corpus.
>>
>
> 0.1% HAM hits seems unusually high.
> would you please check what kind of hams these are?
>
> are they newsletter/bulk or empty messages with attachements, other types?
That was too high, yes. My regex wasn't correct.
The FP rate is actually 1/15000.
The single FP I found was a "mailing list membership reminder" produced
by a mailman installation.
--
Vidar Tyldum Hansen vidar@tyldum.com
Re: iXhash plugin and lists - feedback wanted
Posted by Yet Another Ninja <sa...@alexb.ch>.
On 9/27/2008 5:27 PM, Vidar Tyldum Hansen wrote:
> On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote:
>> Hi all,
>>
>> I'm the author of the iXhash plugin, a piece of code that computes a
>> variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
>> by the German IT magazine iX).
>
> I would like to express my appreciation of your work.
>
>> I guess this list is the best place to ask those of you who use the
>> plugin for feedback. I'd appreciate any comments and information an hit
>> rates, FPs and such
>
> Stats for the last 12 hours:
>
> 70% hitrate on spam.
> 0,1% hitrate on ham.
>
> 3000 emails in corpus.
>
0.1% HAM hits seems unusually high.
would you please check what kind of hams these are?
are they newsletter/bulk or empty messages with attachements, other types?
Re: iXhash plugin and lists - feedback wanted
Posted by Vidar Tyldum Hansen <vi...@mail.tyldum.com>.
On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote:
> Hi all,
>
> I'm the author of the iXhash plugin, a piece of code that computes a
> variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
> by the German IT magazine iX).
I would like to express my appreciation of your work.
> I guess this list is the best place to ask those of you who use the
> plugin for feedback. I'd appreciate any comments and information an hit
> rates, FPs and such
Stats for the last 12 hours:
70% hitrate on spam.
0,1% hitrate on ham.
3000 emails in corpus.
To me, this is a very valuable service and I would be very sad to see it
go away.
--
Vidar Tyldum Hansen
Re: iXhash plugin and lists - feedback wanted
Posted by Larry Nedry <sp...@bluestreak.net>.
On 8/4/08 at 8:42 PM -0500 Chris wrote:
>Hi Dirk, I've been using it on my home system probably ever since you made it
>available. Below are hit stats from yesterday:
>
>Total: 279
>Ham: 122
>Spam: 157
>
>iXhash.cf:
> Rule Name Score Ham Spam %of Ham %of Spam
> -----------------------------------------------------------------------
> LOGINHASH 4.50 30 62 24.59% 39.49%
> LOGINHASH2 2.50 30 61 24.59% 38.85%
> IXHASH 2.50 31 66 25.41% 42.04%
> -----------------------------------------------------------------------
> OVERALL 31 66 25.41% 42.04%
Wow. That doesn't seem right at all. Your setup had the same amount of of
FPs in one day as mine has all of this year. I've found this plugin to be
quite accurate and invaluable!
RULE NAME SPAM HAM %OFSPAM %OFHAM
----------------------------------------------------------------------
LOGINHASH 5965 31 9.54 0.02
LOGINHASH2 5070 19 8.11 0.01
IXHASH 3188 12 5.10 0.01
----------------------------------------------------------------------
Dirk, Your plugin rocks! I hope you can find a way to continue to maintain
your lists!
Nedry
Re: iXhash plugin and lists - feedback wanted
Posted by Chris <cp...@embarqmail.com>.
On Monday 04 August 2008 4:13 pm, Dirk Bonengel wrote:
> Hi all,
>
> I'm the author of the iXhash plugin, a piece of code that computes a
> variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
> by the German IT magazine iX).
> I also run two DNS zones
> (nospam.login-solutions.de,nospam.login-solutions.ag), containing fuzzy
> checksum data from various spam traps.
>
> Now, I'll leave my current job where I had the opportunity to run a
> dedicated server to maintain the lists.
> I wonder if it it is worth my while to actually migrate to whole stuff
> (and expand it to contain data from other sources) or to just release a
> final version of the plugin and call it quits.
>
> I guess this list is the best place to ask those of you who use the
> plugin for feedback. I'd appreciate any comments and information an hit
> rates, FPs and such
>
> Thanks in advance
>
> Dirk
Hi Dirk, I've been using it on my home system probably ever since you made it
available. Below are hit stats from yesterday:
Total: 279
Ham: 122
Spam: 157
iXhash.cf:
Rule Name Score Ham Spam %of Ham %of Spam
-----------------------------------------------------------------------
LOGINHASH 4.50 30 62 24.59% 39.49%
LOGINHASH2 2.50 30 61 24.59% 38.85%
IXHASH 2.50 31 66 25.41% 42.04%
-----------------------------------------------------------------------
OVERALL 31 66 25.41% 42.04%
Though it does hit ham, I don't remember ever seeing any FP's because of it.
I'd say expand it, though again, this is just running on a home system with
one user, me. Also be aware that the above count is cumulative over period of
time (that I'm not really sure of) and not daily.
Keep up the good work
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
Re: iXhash plugin and lists - feedback wanted
Posted by Jeremy Fairbrass <je...@fairbrass.co.nz>.
"Dirk Bonengel" <di...@gmx.de> wrote in message news:489770F9.9080408@gmx.de...
> Hi all,
>
> I'm the author of the iXhash plugin, a piece of code that computes a variety of 'fuzzy checksums' along the lines of the NiXSpam
> project (run by the German IT magazine iX).
> I also run two DNS zones (nospam.login-solutions.de,nospam.login-solutions.ag), containing fuzzy checksum data from various spam
> traps.
>
> Now, I'll leave my current job where I had the opportunity to run a dedicated server to maintain the lists.
> I wonder if it it is worth my while to actually migrate to whole stuff (and expand it to contain data from other sources) or to
> just release a final version of the plugin and call it quits.
>
> I guess this list is the best place to ask those of you who use the plugin for feedback. I'd appreciate any comments and
> information an hit rates, FPs and such
>
> Thanks in advance
>
> Dirk
Hi Dirk,
I've been using iXhash for sometime and find it to be accurate and invaluable. I've never had problems with FPs caused by it. So I
for one really hope you'll be able to continue with it in one way or another, and adding extra data from other sources also sounds
great to me!
MfG,
Jeremy
Re: iXhash plugin and lists - feedback wanted
Posted by youkajouan <ma...@gmail.com>.
Hi,
Did you continue to keep your DNS server ? and your plug-in ?
Are you interested about other DNS server (free) ?
What about a public server farm ? (but need synchronization)
Regards,
Youkajouan
--
View this message in context: http://www.nabble.com/iXhash-plugin-and-lists---feedback-wanted-tp18819983p18941510.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: RE: iXhash plugin and lists - feedback wanted
Posted by Dirk Bonengel <di...@gmx.de>.
-------- Original-Nachricht --------
> Datum: Mon, 4 Aug 2008 18:29:20 -0700
> Von: "Robert - elists" <li...@abbacomm.net>
> An: users@spamassassin.apache.org
> Betreff: RE: iXhash plugin and lists - feedback wanted
>
> >
> > I'm the author of the iXhash plugin, a piece of code that computes a
> > variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
> > by the German IT magazine iX).
> > I also run two DNS zones
> > (nospam.login-solutions.de,nospam.login-solutions.ag), containing fuzzy
> > checksum data from various spam traps.
> >
> > Now, I'll leave my current job where I had the opportunity to run a
> > dedicated server to maintain the lists.
> > I wonder if it it is worth my while to actually migrate to whole stuff
> > (and expand it to contain data from other sources) or to just release a
> > final version of the plugin and call it quits.
> >
> > I guess this list is the best place to ask those of you who use the
> > plugin for feedback. I'd appreciate any comments and information an hit
> > rates, FPs and such
> >
> > Thanks in advance
> >
> > Dirk
>
> Dirk
>
> I just started running iXhash about a week ago on a 3.2.5 SA
>
> I haven't really had enough time to eval the net effects all the way
> around.
>
> Do you have any extra tools that would help the SA community to eval
> iXhash
> in our environments other than what we already have available out there??
>
> - rh
Robert,
I'm afraid, no. My principal problem is getting enough spam/ham (less than say a week old) to do some serious mass checks.
I hope someone around here is in a better position to do so. I'd love some stats. There are enough tools out there for that purpose, I think.
Dirk
--
Psssst! Schon das coole Video vom GMX MultiMessenger gesehen?
Der Eine für Alle: http://www.gmx.net/de/go/messenger03
RE: iXhash plugin and lists - feedback wanted
Posted by Robert - elists <li...@abbacomm.net>.
>
> I'm the author of the iXhash plugin, a piece of code that computes a
> variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
> by the German IT magazine iX).
> I also run two DNS zones
> (nospam.login-solutions.de,nospam.login-solutions.ag), containing fuzzy
> checksum data from various spam traps.
>
> Now, I'll leave my current job where I had the opportunity to run a
> dedicated server to maintain the lists.
> I wonder if it it is worth my while to actually migrate to whole stuff
> (and expand it to contain data from other sources) or to just release a
> final version of the plugin and call it quits.
>
> I guess this list is the best place to ask those of you who use the
> plugin for feedback. I'd appreciate any comments and information an hit
> rates, FPs and such
>
> Thanks in advance
>
> Dirk
Dirk
I just started running iXhash about a week ago on a 3.2.5 SA
I haven't really had enough time to eval the net effects all the way around.
Do you have any extra tools that would help the SA community to eval iXhash
in our environments other than what we already have available out there??
- rh
Re: iXhash plugin and lists - feedback wanted
Posted by Dirk Bonengel <di...@gmx.de>.
-------- Original-Nachricht --------
> Datum: Tue, 5 Aug 2008 06:32:03 -0500
> Von: Chris <cp...@embarqmail.com>
> An: "Dirk Bonengel" <di...@gmx.de>
> CC: users@spamassassin.apache.org
> Betreff: Re: iXhash plugin and lists - feedback wanted
> On Tuesday 05 August 2008 2:06 am, Dirk Bonengel wrote:
> > -------- Original-Nachricht --------
> > > >
> > > > I guess this list is the best place to ask those of you who use the
> > > > plugin for feedback. I'd appreciate any comments and information an
> hit
> > > > rates, FPs and such
> > > >
> > > > Thanks in advance
> > > >
> > > > Dirk
> > >
> > > Hi Dirk, I've been using it on my home system probably ever since you
> > > made it
> > > available. Below are hit stats from yesterday:
> > >
> > > Total: 279
> > > Ham: 122
> > > Spam: 157
> > >
> > > iXhash.cf:
> > > Rule Name Score Ham Spam
> %of
> > > Ham %of Spam
> > >
> -----------------------------------------------------------------------
> > > LOGINHASH 4.50 30 62
> > > 24.59% 39.49%
> > > LOGINHASH2 2.50 30 61
> > > 24.59% 38.85%
> > > IXHASH 2.50 31 66
>
> > > 25.41% 42.04%
> > >
> -----------------------------------------------------------------------
> > > OVERALL 31 66
>
> > > 25.41% 42.04%
> > >
> > > Though it does hit ham, I don't remember ever seeing any FP's because
> of
> > > it.
> > > I'd say expand it, though again, this is just running on a home system
>
> >
> > Chris,
> >
> > from my experience there must be something wrong with your setup. From
> the
> > feedback I got thus far the plugin is quite accurate where FPs are
> > concerned. Thus the relatively high scores I set in the default config.
> I'd
> > recommend having a look at your DNS setup - maybe your provider returns
> > false results. Using OpenDNS e.g. has caused such high FP rates in the
> > past. Let me know if I can help.
> >
> > Dirk
>
> Dirk, using the sa-addon's script for these stats I'm not sure how many
> days
> back the count above is from. For instance the stats were drawn last night
> from this count:
>
> Ham: 132
> Spam: 158
>
> Yesterday my message count was as below:
>
> Spam: 19
> Ham: 13
>
> So it's possible this could be over a 10 day period, I'm not really sure.
> However, when I get home from work today I will look and see what kind of
> ham
> is being hit by it. Up until a few days ago I was just using a locally
> cached
> nameserver, however I've switched to OpenDNS since last Sunday. I'll give
> my
> ISP's nameserver a try and see what happens.
>
> --
> Chris
> KeyID 0xE372A7DA98E6705C
Yep, do a
dig noexistantdomain.nospam.login-solutions.de
and see if you get a response. You shouldn't but OpenDNS has a history for serving you one nevertheless.
Dirk
--
GMX startet ShortView.de. Hier findest Du Leute mit Deinen Interessen!
Jetzt dabei sein: http://www.shortview.de/wasistshortview.php?mc=sv_ext_mf@gmx
Re: iXhash plugin and lists - feedback wanted
Posted by Chris <cp...@embarqmail.com>.
On Tuesday 05 August 2008 2:06 am, Dirk Bonengel wrote:
> -------- Original-Nachricht --------
> > >
> > > I guess this list is the best place to ask those of you who use the
> > > plugin for feedback. I'd appreciate any comments and information an hit
> > > rates, FPs and such
> > >
> > > Thanks in advance
> > >
> > > Dirk
> >
> > Hi Dirk, I've been using it on my home system probably ever since you
> > made it
> > available. Below are hit stats from yesterday:
> >
> > Total: 279
> > Ham: 122
> > Spam: 157
> >
> > iXhash.cf:
> > Rule Name Score Ham Spam %of
> > Ham %of Spam
> > -----------------------------------------------------------------------
> > LOGINHASH 4.50 30 62
> > 24.59% 39.49%
> > LOGINHASH2 2.50 30 61
> > 24.59% 38.85%
> > IXHASH 2.50 31 66
> > 25.41% 42.04%
> > -----------------------------------------------------------------------
> > OVERALL 31 66
> > 25.41% 42.04%
> >
> > Though it does hit ham, I don't remember ever seeing any FP's because of
> > it.
> > I'd say expand it, though again, this is just running on a home system
>
> Chris,
>
> from my experience there must be something wrong with your setup. From the
> feedback I got thus far the plugin is quite accurate where FPs are
> concerned. Thus the relatively high scores I set in the default config. I'd
> recommend having a look at your DNS setup - maybe your provider returns
> false results. Using OpenDNS e.g. has caused such high FP rates in the
> past. Let me know if I can help.
>
> Dirk
Dirk, using the sa-addon's script for these stats I'm not sure how many days
back the count above is from. For instance the stats were drawn last night
from this count:
Ham: 132
Spam: 158
Yesterday my message count was as below:
Spam: 19
Ham: 13
So it's possible this could be over a 10 day period, I'm not really sure.
However, when I get home from work today I will look and see what kind of ham
is being hit by it. Up until a few days ago I was just using a locally cached
nameserver, however I've switched to OpenDNS since last Sunday. I'll give my
ISP's nameserver a try and see what happens.
--
Chris
KeyID 0xE372A7DA98E6705C
Re: iXhash plugin and lists - feedback wanted
Posted by Dirk Bonengel <di...@gmx.de>.
-------- Original-Nachricht --------
> Datum: Mon, 4 Aug 2008 19:11:09 -0500
> Von: Chris <cp...@embarqmail.com>
> An: Dirk Bonengel <di...@gmx.de>
> Betreff: Re: iXhash plugin and lists - feedback wanted
> On Monday 04 August 2008 4:13 pm, Dirk Bonengel wrote:
> > Hi all,
> >
> > I'm the author of the iXhash plugin, a piece of code that computes a
> > variety of 'fuzzy checksums' along the lines of the NiXSpam project (run
> > by the German IT magazine iX).
> > I also run two DNS zones
> > (nospam.login-solutions.de,nospam.login-solutions.ag), containing fuzzy
> > checksum data from various spam traps.
> >
> > Now, I'll leave my current job where I had the opportunity to run a
> > dedicated server to maintain the lists.
> > I wonder if it it is worth my while to actually migrate to whole stuff
> > (and expand it to contain data from other sources) or to just release a
> > final version of the plugin and call it quits.
> >
> > I guess this list is the best place to ask those of you who use the
> > plugin for feedback. I'd appreciate any comments and information an hit
> > rates, FPs and such
> >
> > Thanks in advance
> >
> > Dirk
> Hi Dirk, I've been using it on my home system probably ever since you made
> it
> available. Below are hit stats from yesterday:
>
> Total: 279
> Ham: 122
> Spam: 157
>
> iXhash.cf:
> Rule Name Score Ham Spam %of
> Ham %of Spam
> -----------------------------------------------------------------------
> LOGINHASH 4.50 30 62
> 24.59% 39.49%
> LOGINHASH2 2.50 30 61
> 24.59% 38.85%
> IXHASH 2.50 31 66
> 25.41% 42.04%
> -----------------------------------------------------------------------
> OVERALL 31 66
> 25.41% 42.04%
>
> Though it does hit ham, I don't remember ever seeing any FP's because of
> it.
> I'd say expand it, though again, this is just running on a home system
> with
> one user, me.
>
> Keep up the good work
>
> Chris
>
> --
> Chris
> KeyID 0xE372A7DA98E6705C
Chris,
from my experience there must be something wrong with your setup. From the feedback I got thus far the plugin is quite accurate where FPs are concerned. Thus the relatively high scores I set in the default config.
I'd recommend having a look at your DNS setup - maybe your provider returns false results. Using OpenDNS e.g. has caused such high FP rates in the past.
Let me know if I can help.
Dirk
--
GMX startet ShortView.de. Hier findest Du Leute mit Deinen Interessen!
Jetzt dabei sein: http://www.shortview.de/wasistshortview.php?mc=sv_ext_mf@gmx
AW: iXhash plugin and lists - feedback wanted
Posted by "Starckjohann, Ove" <st...@norddeutsche.de>.
hi Dirk,
the plugin is really useful...the LOGINHASH-DNS-zone's gives even "better" results than the iXHASH...
These are our stats of the last four days:
Email: 6765 Autolearn: 1400 AvgScore: 13.48 AvgScanTime: 2.32 sec
Spam: 3225 Autolearn: 979 AvgScore: 28.11 AvgScanTime: 2.49 sec
Ham: 3540 Autolearn: 421 AvgScore: 0.16 AvgScanTime: 2.16 sec
Time Spent Running SA: 4.36 hours
Time Spent Processing Spam: 2.23 hours
Time Spent Processing Ham: 2.13 hours
TOP SPAM RULES FIRED
----------------------------------------------------------------------
RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM
----------------------------------------------------------------------
1 DCC_CHECK 2329 36.39 72.22 3.76
.
.
.
9 LOGINHASH 1515 22.42 46.98 0.06
.
.
.
14 LOGINHASH2 944 13.95 29.27 0.00
.
.
.
22 IXHASH 644 9.53 19.97 0.03
.
.
.
Email: 4891 Autolearn: 883 AvgScore: 16.00 AvgScanTime: 2.03 sec
Spam: 2670 Autolearn: 785 AvgScore: 28.64 AvgScanTime: 2.24 sec
Ham: 2221 Autolearn: 98 AvgScore: 0.81 AvgScanTime: 1.78 sec
Time Spent Running SA: 2.76 hours
Time Spent Processing Spam: 1.66 hours
Time Spent Processing Ham: 1.10 hours
TOP SPAM RULES FIRED
----------------------------------------------------------------------
RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM
----------------------------------------------------------------------
1 DCC_CHECK 2077 43.20 77.79 1.62
.
.
.
7 LOGINHASH 1377 28.22 51.57 0.14
.
.
. 12 LOGINHASH2 790 16.15 29.59 0.00
.
.
. 30 IXHASH 461 9.43 17.27 0.00
.
.
.
Email: 5477 Autolearn: 1306 AvgScore: 20.18 AvgScanTime: 2.09 sec
Spam: 3228 Autolearn: 1221 AvgScore: 33.73 AvgScanTime: 2.37 sec
Ham: 2249 Autolearn: 85 AvgScore: 0.73 AvgScanTime: 1.67 sec
Time Spent Running SA: 3.17 hours
Time Spent Processing Spam: 2.13 hours
Time Spent Processing Ham: 1.04 hours
TOP SPAM RULES FIRED
----------------------------------------------------------------------
RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM
----------------------------------------------------------------------
1 DCC_CHECK 2516 46.80 77.94 2.09
.
.
. 8 LOGINHASH 1399 25.63 43.34 0.22
.
.
. 24 LOGINHASH2 736 13.44 22.80 0.00
.
.
. 36 IXHASH 416 7.60 12.89 0.00
.
.
.
Email: 6114 Autolearn: 1694 AvgScore: 21.93 AvgScanTime: 2.41 sec
Spam: 3670 Autolearn: 1368 AvgScore: 36.66 AvgScanTime: 2.79 sec
Ham: 2444 Autolearn: 326 AvgScore: -0.18 AvgScanTime: 1.84 sec
Time Spent Running SA: 4.09 hours
Time Spent Processing Spam: 2.84 hours
Time Spent Processing Ham: 1.25 hours
TOP SPAM RULES FIRED
----------------------------------------------------------------------
RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM
----------------------------------------------------------------------
1 DCC_CHECK 3018 50.28 82.23 2.29
.
.
. 10 LOGINHASH 1452 23.77 39.56 0.04
.
.
. 24 LOGINHASH2 792 12.95 21.58 0.00
.
.
. 38 IXHASH 440 7.21 11.99 0.04
So i do think it's USEFUL :-)
Pls - if possible - go on with the project :-)
Ove Starckjohann
> -----Ursprüngliche Nachricht-----
> Von: Dirk Bonengel [mailto:dirk.bonengel@gmx.de]
> Gesendet: Montag, 4. August 2008 23:13
> An: users@spamassassin.apache.org
> Betreff: iXhash plugin and lists - feedback wanted
>
>
> Hi all,
>
> I'm the author of the iXhash plugin, a piece of code that computes a
> variety of 'fuzzy checksums' along the lines of the NiXSpam
> project (run
> by the German IT magazine iX).
> I also run two DNS zones
> (nospam.login-solutions.de,nospam.login-solutions.ag),
> containing fuzzy
> checksum data from various spam traps.
>
> Now, I'll leave my current job where I had the opportunity to run a
> dedicated server to maintain the lists.
> I wonder if it it is worth my while to actually migrate to
> whole stuff
> (and expand it to contain data from other sources) or to just
> release a
> final version of the plugin and call it quits.
>
> I guess this list is the best place to ask those of you who use the
> plugin for feedback. I'd appreciate any comments and
> information an hit
> rates, FPs and such
>
> Thanks in advance
>
> Dirk
>
>