Hi;

What I have found working the best was:

1:  Add as many of the tests as you want with 0 weight. 
2:  Add a header for every test
3:  Monitor your headers and adjust the weights accordingly.
4:  After several months start taking out the tests that their weight has
stayed 0.

This is a lengthy process but as Scott said this is not a one size fits
all... We still adjust our weights after all this time and just fine tune
them.

It has been discussed here over and over again and of course it is one of
Declude's strengths that allows you to not base your final decision based on
a single test.  What we find the tests most useful is with brand new spams
we get since on the average our weighing makes sure if something fails 4-5
tests they get into a holding weight.

Of course if we see a new spam its content will be marked and it no longer
needs any external weight to trap it.

Just some thoughts...

Kami


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, August 27, 2003 1:52 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OSRELAY question.



>Im really surprised that there isn't a site out there that reviews and 
>rates those RBLs. All I have seen is listings.

The problem is that it is very, very difficult to determine the key piece 
of information: false positive ratios.  Most of the information that people 
have about the DNS-based spam tests are things like "It works really well 
for me as a small business" or "As an ISP I find that I can't use it, it 
has more false positives than I want" -- neither of which provides enough 
information to decide whether or not you should use it.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to