[Gross] false positives

[Jesse Thompson]

You probably need to raise filter_bits setting; especially since you are 
using such a large rotate_interval.

Or, if you use the block_threshold functionality, most messages will be 
blocked and not added to the filters, which reduces the chance of false 
positives.

I ran into a similar problem a while ago.  I had raised the filter_bits 
setting as high as 25 to get rid of the false positives.  Now that we 
use the block feature, I have lowered it to 22.  But again, this all 
depends on your rotate_interval setting as well as the load on your servers.

Our current settings:
num_buffers: 12
rotate_interval = 3600
filter_bits = 22

Jesse

Imri Zvik wrote:
> Hi,
> 
> I have two grossd server with the following configuration:
> 
> number_buffers=32
> rotate_interval=10800
> 
> 
> 
> After running for a couple of days, the rate of false positives increases, and 
> now most of the attempts results false positives:
> 
> 
> [root at greylist2 ~]# /usr/local/bin/gclient sjsms somethingelse at abc.com 
> greylist at me.com 137.0.0.2 j823wd23ed 2 10.220.17.1 1111
> got: M $Y
> M $Y
> got: M $Y
> M $Y
> [root at greylist2 ~]# /usr/local/bin/gclient sjsms somethingelse at monty.com 
> greylist at somewhere.com 111.111.111.111 f34f3ggsdgf 2 10.220.17.1 1111
> got: M $Y
> M $Y
> got: M $Y
> M $Y
> 
> 
> 
> grossd summary:
> 
> Dec 16 13:23:33 greylist2 grossd: grossd status summary (begin, end, trust, 
> match, greylist, block): 1229426312, 1229426613, 0, 10452, 1060, 0
> 
> 
> _______________________________________________
> Gross mailing list
> Gross at lists.utu.fi
> https://lists.utu.fi/mailman/listinfo/gross

-- 
   Jesse Thompson
   Division of Information Technology, University of Wisconsin-Madison
   Email/IM: jesse.thompson at doit.wisc.edu
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3340 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.utu.fi/pipermail/gross/attachments/20081216/27fb593f/attachment.bin>