Georg Graf
georg.graf@wu-wien.ac.at
Mon, 19 Sep 2005 10:23:44 +0200
Hi there, A Report of my reputation experiences: At first I ran dcc with -t rep,10. This yielded lots of false reputations positives. Quite some of them had reputations of 50% and above. Then I switched to -t rep,80. This went quite well for 2 weeks or so. Today I again got a false positive. One of them that hurt ;( Here we go: || ### end of message body ######################## || DCC Reputation-->spam || || X-DCC-wuwien-Metrics: samantha.wu-wien.ac.at 1290; bulk rep Body=many || Fuz1=many Fuz2=many rep=84% || reported: 11 checksum server || IP: 9f5d8e4e ff6f2dd0 0340200b 4112e97b || env_From: b6bc4569 7f6ddb23 b4a47d04 fac3ca9d || From: 2922251f 95a0d50f 9c6db2b9 d578cf63 || Message-ID: eecdbde7 95ad4423 7ea086f8 243e776d || Received: 76286203 9d782434 a0e824ef 57a454b0 || Body: 501894b5 cd8a5f8e 7306f4f9 c63e3693 0 || Fuz1: fc304a1c d50b8239 00162693 c59e687c 0 || Fuz2: 24ad7f8e e1afd694 62a7062d af7821cc 0 || rep-total: 9f5d8e4e ff6f2dd0 0340200b 4112e97b 2 || rep: 9f5d8e4e ff6f2dd0 0340200b 4112e97b 0 || || result: accept Ok. Since without setting rep-total manually, it takes as default the reject_at value, I think I'll set it to a higher value. But this is not very logical. Because when I raise the rep-total value, then I can be even more sure about the correctness of the reputation value. Hmm. I'm kind of clueless. I'll give this a try: || $ egrep -i '^(dccm|rep)' dcc_conf || REP_ARGS="-t rep,90 -t rep-total,1000" || DCCM_ENABLE=on || DCCM_ARGS="-p inet:25524@samantha -A -W -a REJECT -S Content-class -j 1500" || DCCM_LOGDIR=log || DCCM_WHITECLNT=whiteclnt || DCCM_USERDIRS=userdirs || DCCM_LOG_AT=25 || DCCM_REJECT_AT=50 || DCCM_CKSUMS= || DCCM_XTRA_CKSUMS= regards, George -- Vienna University of Economics and Business Administration Central and Internet Services Section Center for Computer Services UNIX Server Administration PGP/GPG Key ID: 0xa5232ad5