More "your mileage with vary." I was also curious about the difference of running as ip4r or dnsbl. Y'all may know the issue, but I don't. I honestly thought one would work and other wouldn't. The results is it doesn't seem to matter which way you run it. Also in my case, there is considerable overlap of Sniffer and MXRATE, but Sniffer had more hits.
In 6 hours of running both ip4r and dnsbl setup (zero scoring), the following is yielded: 9,855 total msgs 8,233 Sniffer hits 6,237 MXRATE-BLOCK (ip4r) 6,259 MXRATE-BLACK-LAST (dnsbl) 251 MXRATE-SUSPICIOUS (ip4r) 252 MXRATE-SUSPICIOUS-LAST (dnsbl) 752 MXRATE-ALLOW (ip4r) 755 MXRATE-WHITE-LAST (dnsbl) I think statistical differences are so small as to be a wash. 6,010 hits both Sniffer & BLOCK 6,032 hits both Sniffer & BLACK-LAST Of the 6,200+ BLOCK/BLACK-LAST msgs, 39 msgs scored so low to have no action; 240 would have had the subject tagged. The rest would have been deleted anyway. Appears adding MXRATE back in (at least for me), would be of small benefit, but will likely do it. John C ---------- Original Message ---------------------------------- From: "Dave Doherty" <[EMAIL PROTECTED]> Reply-To: [email protected] Date: Wed, 1 Mar 2006 21:59:57 -0500 >Hi Andrew- > >I did not look at the correlation between MXRATE and SNIFFER, only to see >whether adding MXRATE would make a big difference overall. > >>From a quick scan, it looks like all or most of the messages that hit MXRATE >>also hit SNIFFER, which supports your observation. > >I run SNIFFER and MXRATE ahead of all the filters. So the big question for me >is whether giving MXRATE a real weight will eliminate any filter processing. I >think I'll give MXRATE a 3, so anything that is detected by SNIFFER and MXRATE >will at least be held. > >-d > ----- Original Message ----- > From: Colbeck, Andrew > To: [email protected] > Sent: Wednesday, March 01, 2006 8:03 PM > Subject: RE: [Declude.JunkMail] MXRATE FYI > > > Wow, Dave. > > Talk about "your mileage may vary"... > > My traffic has a huge overlap between MXRate-BL and what Message Sniffer > hits. > > Total hits for Message Sniffer: 26,504 > Total hits for MXRate-BL: 5,746 > Total hits for MXRateBL which also hit Sniffer: 5,697 > > We also had 21 hits on MXRate-BL for messages we allowed in; 1 was a message > that was spam from a bulk emailer. There were 3 more from ISPs that I think > shouldn't be listed. The remaining 17 were all specific lists that we > heavily counterweight because the users do not consider those particular > lists spam from bulk providers. > > My old weight for this test was 5 or 6 out of 20, and that's where it will > end up again tomorrow. > > Andrew 8) > > > > > >---------------------------------------------------------------------------- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty > Sent: Wednesday, March 01, 2006 4:19 PM > To: [email protected] > Subject: Re: [Declude.JunkMail] MXRATE FYI > > > I'm running MXRATE at zero weight for testing also. So far today, MXRATE > hasn't picked up anything that I'm not already holding or deleting with the > other tests... It hit on about 2500 messages so far, but they all wound up > with scores over 25 anyway. (I hold on 10, delete on 20). The ones I really > wanted help with - those that hit only SNIFFER, which I weight at 7 - don't > seem to be tripping MXRATE... > > -Dave Doherty > Skywaves, Inc. > ----- Original Message ----- > From: John Carter > To: [email protected] > Sent: Wednesday, March 01, 2006 3:10 PM > Subject: RE: [Declude.JunkMail] MXRATE FYI > > > Hmmm, interesting. I've gotten over 3200 hits in 2 1/2 hours with ip4r > ***.mxrate.net. I'll test these with a zero score and WARN to see if there > is a difference. > > John C > > > >-------------------------------------------------------------------------- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott > Fisher > Sent: Wednesday, March 01, 2006 1:56 PM > To: [email protected] > Subject: Re: [Declude.JunkMail] MXRATE FYI > > > On a subject tag @ 100, hold @ 200, delete @ 300 scale. > I was hoping to revisit the weights, when I noticed there were none. > > > ----- Original Message ----- > From: Harry Vanderzand > To: [email protected] > Sent: Wednesday, March 01, 2006 12:24 PM > Subject: RE: [Declude.JunkMail] MXRATE FYI > > > thanks. That was quick and simple. > > How much weight relative to your hold weight do people give mxrate. > > What configuration do people use. It seems like there is a lot that > can be done with it from the bit I just read > > I just have the following: > > MXRATE-BLOCK ip4r *****.mxrate.net 127.0.0.2 4 0 (***** > get this when you subscribe) > > > Thank you > Harry Vanderzand > inTown Internet & Computer Services > 519-741-1222 > > > > > > >---------------------------------------------------------------------- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John > Carter > Sent: Wednesday, March 01, 2006 12:38 PM > To: [email protected] > Subject: RE: [Declude.JunkMail] MXRATE FYI > > > Sign up says it free. I bite and got an email back with what to do. > (Sorry, they ask that the address not be shared.) I assume the rest of the > Declude settings don't change. > > Thanks, Scott, for the heads up. > > John C > > > >---------------------------------------------------------------------- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott > Fisher > Sent: Wednesday, March 01, 2006 11:14 AM > To: [email protected] > Subject: [Declude.JunkMail] MXRATE FYI > > > FYI: > > It looks like around Janurary 26th the pub.mxrate.com IP4R DNS > services were made private. Since then I've had no response from the DNS > lists. > > They have discontinued the public service and made a private service > available. > If you are interested the URL is here: > http://www.mxrate.com/Subscribe.asp > > ----------------------------------------------------- > Scott Fisher > Director of IT > Farm Progress Companies > 191 S Gary Ave > Carol Stream, IL 60188 > 630-462-2323 > > This email message, including any attachments, is for the sole use > of the intended recipient(s) and may contain confidential and privileged > information. Any unauthorized review, use, disclosure or distribution is > prohibited. If you are not the intended recipient, please contact the sender > by reply email and destroy all copies of the original message. Although Farm > Progress Companies has taken reasonable precautions to ensure no viruses are > present in this email, the company cannot accept responsibility for any loss > or damage arising from the use of this email or attachments. > > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
