Re: effectiveness of DCC checks?

2015-04-22 Thread Matus UHLAR - fantomas
On 21.04.15 18:49, Quanah Gibson-Mount wrote: I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. I recommend you putting mass senders to whitelist. It's perfect scoring item

Re: effectiveness of DCC checks?

2015-04-22 Thread Reindl Harald
Am 22.04.2015 um 12:47 schrieb Matus UHLAR - fantomas: On 21.04.15 18:49, Quanah Gibson-Mount wrote: I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. I recommend you putting

Re: effectiveness of DCC checks?

2015-04-22 Thread Matus UHLAR - fantomas
On 21.04.15 18:49, Quanah Gibson-Mount wrote: I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. Am 22.04.2015 um 12:47 schrieb Matus UHLAR - fantomas: I recommend you putting

Re: Re: effectiveness of DCC checks?

2015-04-22 Thread Steve Freegard
Hi Quanah, On 22/04/15 02:52, [*] Quanah Gibson-Mount wrote: --On Tuesday, April 14, 2015 11:05 PM +0100 Steve Freegard s...@fsl.com wrote: Just because *you* can't find any sense in it; others might be able to. For example: meta __FSL_ANY_BULK ((DCC_CHECK || RAZOR2_CHECK ||

Re: effectiveness of DCC checks?

2015-04-21 Thread Quanah Gibson-Mount
I just wanted to give a thank you to everyone who responded to this thread. I clearly misunderstood what DCC does, and it now has little value to me as a scoring item. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source

Re: effectiveness of DCC checks?

2015-04-21 Thread Quanah Gibson-Mount
--On Tuesday, April 14, 2015 11:05 PM +0100 Steve Freegard s...@fsl.com wrote: On 14/04/15 19:45, Reindl Harald wrote: Am 14.04.2015 um 20:26 schrieb Kevin A. McGrail: On 4/14/2015 2:16 PM, Reindl Harald wrote: DCC isn't designed to tell you if a message is spam/not-spam. It's a *BULK*

Re: effectiveness of DCC checks?

2015-04-17 Thread Matus UHLAR - fantomas
I don't see why it's not auto generated - perhaps with a cap of 1.5. On 16.04.15 15:06, John Hardin wrote: How long are signatures kept in the DCC database? Masscheck uses a corpus that covers a couple of years. If the DCC signatures expire within a month or two then that would skew the

Re: effectiveness of DCC checks?

2015-04-17 Thread Axb
On 04/17/2015 01:17 PM, RW wrote: On Thu, 16 Apr 2015 15:06:42 -0700 (PDT) John Hardin wrote: On Thu, 16 Apr 2015, RW wrote: I don't see why it's not auto generated - perhaps with a cap of 1.5. How long are signatures kept in the DCC database? Masscheck uses a corpus that covers a couple

Re: effectiveness of DCC checks?

2015-04-17 Thread RW
On Thu, 16 Apr 2015 15:06:42 -0700 (PDT) John Hardin wrote: On Thu, 16 Apr 2015, RW wrote: I don't see why it's not auto generated - perhaps with a cap of 1.5. How long are signatures kept in the DCC database? Masscheck uses a corpus that covers a couple of years. If the DCC signatures

Fwd: Fwd: Re: effectiveness of DCC checks?

2015-04-16 Thread Kevin A. McGrail
Vernon, do you have a recommended score for the implementation of DCC with SA? There are concerns that bulk mail from good senders has been hit by DCC which is completely by design. Vernon replied off-list so I wanted to bring the relevant portion back to the list: My general suggestion is

Re: Fwd: Fwd: Re: effectiveness of DCC checks?

2015-04-16 Thread Mark Martinec
Kevin A. McGrail wrote: Vernon, do you have a recommended score for the implementation of DCC with SA? There are concerns that bulk mail from good senders has been hit by DCC which is completely by design. Vernon replied off-list so I wanted to bring the relevant portion back to the list: My

Re: Fwd: Fwd: Re: effectiveness of DCC checks?

2015-04-16 Thread Axb
On 04/16/2015 02:15 PM, Mark Martinec wrote: I don't agree with moving a DCC rule into a __* rule or setting its score to a near zero. I find DCC hits useful as they are now: contributing to the overall score, bit not so large as to make a major effect by themselves. FWIW; I totally agree

Re: effectiveness of DCC checks?

2015-04-16 Thread Reindl Harald
Am 16.04.2015 um 14:55 schrieb Axb: On 04/16/2015 02:15 PM, Mark Martinec wrote: I don't agree with moving a DCC rule into a __* rule or setting its score to a near zero. I find DCC hits useful as they are now: contributing to the overall score, bit not so large as to make a major effect by

Re: effectiveness of DCC checks?

2015-04-16 Thread Matus UHLAR - fantomas
On 04/16/2015 02:15 PM, Mark Martinec wrote: I don't agree with moving a DCC rule into a __* rule or setting its score to a near zero. I find DCC hits useful as they are now: contributing to the overall score, bit not so large as to make a major effect by themselves. Am 16.04.2015 um 14:55

Re: effectiveness of DCC checks?

2015-04-16 Thread Reindl Harald
Am 16.04.2015 um 17:45 schrieb Matus UHLAR - fantomas: On 04/16/2015 02:15 PM, Mark Martinec wrote: I don't agree with moving a DCC rule into a __* rule or setting its score to a near zero. I find DCC hits useful as they are now: contributing to the overall score, bit not so large as to make a

Re: effectiveness of DCC checks?

2015-04-16 Thread RW
On Thu, 16 Apr 2015 07:14:12 -0400 Kevin A. McGrail wrote: Vernon, do you have a recommended score for the implementation of DCC with SA? There are concerns that bulk mail from good senders has been hit by DCC which is completely by design. Vernon replied off-list so I wanted to bring

Re: effectiveness of DCC checks?

2015-04-16 Thread John Hardin
On Thu, 16 Apr 2015, RW wrote: I don't see why it's not auto generated - perhaps with a cap of 1.5. How long are signatures kept in the DCC database? Masscheck uses a corpus that covers a couple of years. If the DCC signatures expire within a month or two then that would skew the masscheck

Re: effectiveness of DCC checks?

2015-04-15 Thread Kevin A. McGrail
On 4/14/2015 5:43 PM, John Hardin wrote: It's not. The 1.1 points is hardcoded: 50_scores.cf:score DCC_CHECK0 1.1 0 1.1 It's reasonable to argue that this score should be informational only, and that it should only be scored meaningfully in metas. It doesn't look like

Re: effectiveness of DCC checks?

2015-04-15 Thread Reindl Harald
Am 15.04.2015 um 10:24 schrieb Matus UHLAR - fantomas: Am 14.04.2015 um 20:44 schrieb Dave Pooser: Finally I would submit that if the phrase sometimes wrong, but never uncertain sounds like a description of your mailing list posts, it¹s worth putting the effort in to change that On 14.04.15

Re: effectiveness of DCC checks?

2015-04-15 Thread Matus UHLAR - fantomas
Am 14.04.2015 um 20:44 schrieb Dave Pooser: Finally I would submit that if the phrase sometimes wrong, but never uncertain sounds like a description of your mailing list posts, it¹s worth putting the effort in to change that On 14.04.15 20:49, Reindl Harald wrote: nobody is perfect, but if i

effectiveness of DCC checks?

2015-04-14 Thread Quanah Gibson-Mount
I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend I'm routinely seeing where it is flagging a lot of email that clearly isn't spam. Are others who use

Re: effectiveness of DCC checks?

2015-04-14 Thread Robert Schetterer
Am 14.04.2015 um 19:59 schrieb Quanah Gibson-Mount: I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend I'm routinely seeing where it is flagging a lot of

Re: effectiveness of DCC checks?

2015-04-14 Thread Kevin A. McGrail
On 4/14/2015 2:16 PM, Reindl Harald wrote: DCC isn't designed to tell you if a message is spam/not-spam. It's a *BULK* indicator. e.g. have lots of people seen this message? that is simply not true and defeats the purpose I disagree. That description of DCC seems very accurate to me. See

Re: effectiveness of DCC checks?

2015-04-14 Thread Jeff Mincy
From: Quanah Gibson-Mount qua...@zimbra.com Date: Tue, 14 Apr 2015 10:59:28 -0700 I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend I'm

Re: effectiveness of DCC checks?

2015-04-14 Thread Steve Freegard
Quanah, On 14/04/15 18:59, Quanah Gibson-Mount wrote: I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend I'm routinely seeing where it is flagging a lot

Re: effectiveness of DCC checks?

2015-04-14 Thread Reindl Harald
Am 14.04.2015 um 20:11 schrieb Steve Freegard: Quanah, On 14/04/15 18:59, Quanah Gibson-Mount wrote: I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend

Re: effectiveness of DCC checks?

2015-04-14 Thread John Hardin
On Tue, 14 Apr 2015, Kevin A. McGrail wrote: On 4/14/2015 5:05 PM, Steve Freegard wrote: However - I'll readily agree with you that DCC_CHECK adding score to all bulk mail isn't that useful, however that is what the mass-checker has decided works best with the corpus of mail available. I

Re: effectiveness of DCC checks?

2015-04-14 Thread Dave Pooser
DCC isn't designed to tell you if a message is spam/not-spam. It's a *BULK* indicator. e.g. have lots of people seen this message? that is simply not true and defeats the purpose the problem are idiots reporting legit mail as spam Well, the folks who *run* the DCC servers seem to disagree

Re: effectiveness of DCC checks?

2015-04-14 Thread Bill Cole
On 14 Apr 2015, at 13:59, Quanah Gibson-Mount wrote: I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend I'm routinely seeing where it is flagging a lot

Re: effectiveness of DCC checks?

2015-04-14 Thread Reindl Harald
Am 14.04.2015 um 20:26 schrieb Kevin A. McGrail: On 4/14/2015 2:16 PM, Reindl Harald wrote: DCC isn't designed to tell you if a message is spam/not-spam. It's a *BULK* indicator. e.g. have lots of people seen this message? that is simply not true and defeats the purpose I disagree.

Re: effectiveness of DCC checks?

2015-04-14 Thread Reindl Harald
Am 14.04.2015 um 20:44 schrieb Dave Pooser: Finally I would submit that if the phrase sometimes wrong, but never uncertain sounds like a description of your mailing list posts, it¹s worth putting the effort in to change that nobody is perfect, but if i would be uncertain i just won't say

Re: effectiveness of DCC checks?

2015-04-14 Thread Kevin A. McGrail
On 4/14/2015 2:45 PM, Reindl Harald wrote: because i can't find any sense in give bulk mail just because it is bulk mail - indepdendent of subscribed, double-optin and what not - a penalty however, the real problem of all the hashing services is the way how personalized parts get stripped

Re: effectiveness of DCC checks?

2015-04-14 Thread Mark Martinec
John Hardin wrote: [...] The 1.1 points is hardcoded: 50_scores.cf:score DCC_CHECK0 1.1 0 1.1 It's reasonable to argue that this score should be informational only, and that it should only be scored meaningfully in metas. Steve Freegard wrote: However - I'll readily agree with

Re: effectiveness of DCC checks?

2015-04-14 Thread Kevin A. McGrail
On 4/14/2015 5:05 PM, Steve Freegard wrote: However - I'll readily agree with you that DCC_CHECK adding score to all bulk mail isn't that useful, however that is what the mass-checker has decided works best with the corpus of mail available. I am not sure DCC is masschecked, to be honest...

Re: effectiveness of DCC checks?

2015-04-14 Thread Steve Freegard
On 14/04/15 19:45, Reindl Harald wrote: Am 14.04.2015 um 20:26 schrieb Kevin A. McGrail: On 4/14/2015 2:16 PM, Reindl Harald wrote: DCC isn't designed to tell you if a message is spam/not-spam. It's a *BULK* indicator. e.g. have lots of people seen this message? that is simply not true

Re: effectiveness of DCC checks?

2015-04-14 Thread Reindl Harald
Am 14.04.2015 um 19:59 schrieb Quanah Gibson-Mount: I've noticed that DCC_CHECK is flagging on tons of items that are clearly not spam. The most recent hit for me today was a release announcement from the mariadb folks. Overall, it's a trend I'm routinely seeing where it is flagging a lot of