Madscientist,
Tuesday, October 8, 2002 you wrote:
M> A final thought about false positives - If there is a false
M> positive and nobody ever notices then is that really a false
M> positive?
The false positives we see generally are:
1) mailing list subscriptions
2) business to business messages
a) sending server is on a spam blacklist
b) content fools sniffer
3) personal messages
a) sending server on spam blacklist
b) content (usually an attachment or a forward) fools sniffer or
one of our custom filters
Honestly a lot of the mailing list subscriptions would never be missed
if they were just deleted because the subscribers frequently are
relatively high volume users. On the other hand these are by far the
easiest to fix since they tend to be repetitive. I prefer to "fix"
them by applying a negative weight in declude.
The business to business messages are often repetitive too and "fixed"
in the same manner. It is astounding to me that a lot of businesses
just will not correct open relays or other such spam related
deficiencies. Communication with them on any level seems absolutely
pointless. Usually these are missed - for instance the typical "I'll
meet you at noon at so and so" message.
The personal messages are the most difficult and becoming worse. They
are random and infrequent. They are often among the most important
messages. Individuals have an unbelievable number of private e-mail
accounts that they seemingly use with little organized thought. And
some of the messages are SPAM except for the fact that the user
intends to send them and the recipient wants them. A very, very
difficult problem.
Terry Fritts
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
