Hi all! Over the past months (I've been distracted) I discussed with Stevan Bajic some change in the way DSPAM whitelists email addresses, and would like to ask what your take on it is.
Basically the one single aspect in which DSPAM fails me is that once
it's decided to whitelist an email address, it's really hard to tell
it not to.
The proposed change would affect how the whitelist threshold config
variable works, and therefore needs to be carefully considered, hence
my posting here.
The current behaviour:
- A token needs 15x more innocent hits than spam hits to be
considered for whitelisting, and
- the token also needs to have more innocent hits than the whitelist
threshold.
The proposed change is:
- Consider a token whitelisted when:
innocent hits - spam hits > whitelist threshold.
- Reset innocent hits to zero once a whitelist token gets a spam
hit.
Aside from removing a magic factor, the behaviour shouldn't be too
different. For a new token that hasn't got spam hits, the whitelist
threshold config variable would still determine how many innocent hits
are needed to whitelist the token.
It's when the token also has spam hits that the behaviour becomes much
more responsive. A single spam hit would stop a whitelisted token from
being whitelisted.
If you kicked the token out of the whitelist that way, you'd then not
need 15 *times* as many innocent hits as spam hits, but "whitelist threshold"
*more*. It still depends on how often the token has been marked as
spam how long it'll take to whitelist it again.
For the full discussion, visit
https://sourceforge.net/tracker/index.php?func=detail&aid=3142744&group_id=250683&atid=1126468
Thanks,
Jens
--
1.21 Jiggabytes of memory should be enough for anybody.
signature.asc
Description: Digital signature
------------------------------------------------------------------------------ What Every C/C++ and Fortran developer Should Know! Read this article and learn how Intel has extended the reach of its next-generation tools to help Windows* and Linux* C/C++ and Fortran developers boost performance applications - including clusters. http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________ Dspam-devel mailing list Dspam-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-devel
