To: "ASSP user mailinglist" <[email protected]>
> Of the domains listed by uribl providers surbl.org or uribl.com in
> mails received by us in the last week:
> - 67% was listed by surbl.org alone
> - 21% was listed by uribl.com alone but some of these were false positives
> - 12% was listed by both surbl.org and uribl.com
>
> (seems consistent with before)
> So I'll better use only surbl.org, that will still catch 79% of those
> with lower risk on false positives. False positive or not is a
> subjective matter of course...
> Does anyone know if uribl.swinog.ch is a good uribl provider?

that's exactely the results i'd expect using surbl and uribl together. In 
fact i suggested a few days ago to use multi.surbl.org alone as the default 
. That's all you need as a part of a complex filtering approach.

and, imho minimal defaults for a good quick start in email filtering for 
2007 (goal : close to zero false positives and 90+%  of spam blocked) are .

1) invalidate formate of helo
2) delaying (thanks przemek that's the single most useful feature in assp !)
3) rbl (only the default, with maxit set to 1)
4) multi.surbl.org
5) level1 attachment blocking

and if i had to call one dead feature to drop from assp in 2007, i'd say 
bayesian filtering.  YMMV 

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to