> OK - if we see the results in > http://www.spamhaus.org/statistics/countries.lasso > it says imo: nothing!
that isn't exactly the approach we're discussing here :) > The number of spams must be compared with the number > of connected computers and with the number of regular mails > before u can say anything about that "country-spam-value". > > http://www.spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=spam and that's exactly what I wrote; the "spam/ham" points are calculated from the amount of spam/ham messages a given mailserver (or ASSP in our case) sees and this means that each and every ASSP will have its own "value" it isn't (and can't be) a "global value" since there are too many factors influencing the score; don't stop yourself from thinking "wider" there isn't just "one country" and "one mail server" :) sorry if I was unclear (feel free to ask) but I think Fritz got the idea :-D > If you put over that spamhaus list the headline "number of Windows- > Computers in Use" or "number of internetconnectons countrywide" it > would have the same order, with the headline "number of regular mails > send" too. That's an effect (or a cause <eg> ?) but that doesn't matter if/when you score messages using the source IP (and it shouldn't, otherwise we'd have to score messages using OS based rules and a user based score) come on, get real, the idea isn't to "blackhole" anyone, just to improve the filtering abilities and btw not to BLOCK anyone at all > The most SPAM i catch (collecting adress to report at spamcop) > comes from the USA - but I never ever would block the USA - even > if the number of regular mails is relative low. well, so, in your case USA will get a 50% spamscore, THEN, if the sending machine passes all the other tests with flying colors, the mail will go through without any issue.. where's the problem ? > The discussion about that country thing reminds me a bit like politicans > if they want new Laws - without executing the ones they already have. No, you're totally off-track, please re-read how the whole thing should work; it is NOT a "fixed country score", just a "floating value" which increases or decreases for each ASSP and whose value is based from the amount of spam/ham emails received from each country; it isn't "arbitrary" > Who uses ALL features ASSP is offering won't need a country-blocking > or scoring even! never say never, and btw whatever may help performing a faster filtering will be welcome imVHo; especially if the approach will keep the amount of "false positives" low enough ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
