On Sun, 1 Jul 2012, [email protected] wrote:

On 07/01, Jari Fredriksson wrote:
Did re-read wiki about cleaning corpus, and removed all mail from Facebook
and Linkedin etc. from corpus. Also mail from MAILER-DAEMON and from
ALL_TRUSTED removed.

I wouldn't remove the facebook stuff... linkedin seems kind of evil though.
But if you got a legit email from facebook, and it hit a blacklist, that
was a legit failure of that blacklist, and valuable information.
Especially since things like sought have a bad habit of inappropriately
causing stuff from facebook to get flagged as spam.

Removing MAILDER-DAEMON and ALL_TRUSTED stuff is probably fine.

I'd mildly disagree. Having ALL_TRUSTED hams is useful for FP analysis and prevention, and having an ALL_TRUSTED spam is equally valuable. ALL_TRUSTED means "not forged", not "not spam".

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Justice is justice, whereas "social justice" is code for one set
  of rules for the rich, another for the poor; one set for whites,
  another set for minorities; one set for straight men, another for
  women and gays. In short, it's the opposite of actual justice.
                                                    -- Burt Prelutsky
-----------------------------------------------------------------------
 3 days until the 236th anniversary of the Declaration of Independence

Reply via email to