Hey Scott, It looks like from your spamtrap page that you are working on some new tests: TESTTEST and FREEMAIL. They look like they are getting a pretty high hit rate, do these look like they may be available within the next few releases? As I've said before, outside of SPAMCOP, I rely most heavily on your tests, especially since they can catch spam from unlisted servers.
Chuck Frolick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, December 21, 2001 12:20 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] newbie here >Question is, what test should I be running to catch genuine spam? > >I want to be on the safe side to start out. I have (and I am) reading >the manual and I am looking up the entries in the spam log. Each domain seems to have a different "spam profile", depending on how long the domain has been around, where the addresses are found, and so forth. So different domains may have different needs. The most ideal tests tend to be those that catch a lot of spam, while catching little (if any) legitimate mail. In general, we've found the best test is the BADHEADERS test, because it can catch a lot of spam, while not letting any legitimate mail through (with the exception of mail that is not RFC-compliant, which would come from a broken E-mail client -- but their mail isn't going to make it to many other servers, as well). Another good test is the MAILFROM test, which will catch spam that uses a fake domain in the return address, which also shouldn't catch any legitimate mail. A new DNS-based test that works quite well is the SPAMCOP test. To see how well this and other tests work, you can go to http://www.declude.com/spamtrap.htm . -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . __________ Information from NOD32 1.134 (20011219) __________ This message was checked by NOD32 for Exchange e-mail monitor. http://www.nod32.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
