In April, we started to go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. The results this month are based on over 8,500 spams that were received, all in July, 2002. In July, our spamtraps received 14% more spam than June (June was about the same as May, but May had over 20% more spam than April). July's volume is more than all of January and February combined.
The following is a list of tests that we run against the E-mails arriving at the spamtrap, and what percentage of the spam they caught (it will be easier to read if you use a fixed-width font): WEIGHT10 97.80% WEIGHT20 89.10% SNIFFER 84.06% SPAMCOP 74.13% XBL 58.40% SPAMHEADERS 52.49% REVDNS 45.40% POSTFIXGATE 44.55% NJABL 38.84% MONKEYPROXIES 36.31% FREEMAIL 32.98% DSBLALL 32.90% HEUR10 32.78% DSBL 29.84% BADHEADERS 29.31% HELO 27.51% NOABUSE 24.71% OSPROXY 23.27% DORKZTL 21.97% OSRELAY 21.58% OSSRC 20.29% NOPOSTMASTER 19.69% ORDB 19.61% RSL 19.27% ROUTING 17.06% DORKS 16.52% HEUR9 12.84% IPWHOIS 12.36% BLARSBL 11.07% BLITZEDHTTP 10.02% SPAMHAUS 9.20% BLITZEDSOCKS 8.87% HEUR8 8.36% DEVNULL 6.81% BADWHOIS 6.77% DSN 5.12% FABELSOURCES 4.87% OSSOFT 4.51% KITHRUP 2.99% NJABLDUL 1.79% MAILFROM 1.47% OSDUL 1.30% PIGS 1.08% ABL 0.89% MONKEYFORMMAIL 0.49% BLITZEDWINGATE 0.38% COMPU 0.12% DNSUCE 0.07% The WEIGHT10 and WEIGHT20 tests are just a weighting system that assigns a weight to each E-mail, based on the spam tests that fail, so they don't really count as spam tests by themselves. The two best tests by far are SNIFFER ( http://www.sortmonster.com ) at 84.06% and SPAMCOP ( http://www.spamcop.net ) at 74.13%. More information on most of the various spam tests shown above can be found at http://www.declude.com/junkmail/support/ip4r.htm . You can look up an IP address using the Spam Database Lookup tool at http://www.DNSstuff.com . The most recent 20 spams in our spamtraps, and the tests they failed, can be found at http://www.declude.com/spamtrap.htm . -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
