Hi Scott:

You really don't need a consensus - you just need to be consistent!


My suggestion:

The various RBL and WhiteList/Blacklists are all based on "membership" in
that appropriate "list" of IPs.

So, "OSSRC" means, this mail returned "true" when check if the IP is on a
list of servers that are likely SPAM.

SPAMROUTING means this mail returned "true" when checked for suspicious
routing that's likely SPAM.
BADHEADERS means this mail returned "true" when checked for bad headers that
are likely SPAM.
SPAMHEADERS means this mail returned "true" when checked for suspicious
headers that are likely SPAM.

Accordingly, future test names should describe the situation that makes them
SPAM.


Wherever possible, I would TOTALLY omit ANY negative/positive implication.

ENVFROM, PERCENT are good examples.  To be consistent you should have named:

ENVHELO - instead of HELOBOGUS/HELOVALID
REVDNS  - instead of REVDNSEXISTS


I'm not saying one is better than the other - I just think for usability
reasons you shoulnd't look for consensus - but just implement ONE method and
stick to it.


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Wednesday, June 26, 2002 04:52 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] Something wrong?



>Am I doing something incorrectly? I have put the following lines in my
>config files:
>
>Global.cfg
>HELOBOGUS       helobogus       x       x       0       0

Just to keep people on their toes, the test type is "helovalid", so it
should be:

HELOBOGUS       helovalid       x       x       0       0

Unfortunately, there seems to be no consensus as to whether to name tests
for what causes them to pass, or what causes them to fail.
                         -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to