In April, we started to go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. The results this month are based on over 11,000 spams that were received, all in September, 2002. In September, our spamtraps received 10% more spam than in August (August was 15% more spam than July, and July was about 15% higher than June).
The following is a list of tests that we run against the E-mails arriving at the spamtrap, and what percentage of the spam they caught (it will be easier to read if you use a fixed-width font): WEIGHT10 96.51% WEIGHT20 89.04% SNIFFER 85.29% SPAMCOP 69.38% XBL 50.80% MAILDEFLECTOR 48.37% SPAMHEADERS 42.46% REVDNS 42.18% MONKEYPROXIES 35.93% NJABL 31.56% HELO 30.56% HEUR10 29.00% BADHEADERS 24.83% DSBLALL 24.71% NOPOSTMASTER 24.64% POSTFIXGATE 24.30% NOABUSE 22.33% DSBL 22.26% DORKZTL 21.47% OSSRC 20.65% OSPROXY 19.27% OSRELAY 15.66% HEUR9 15.20% ORDB 14.59% DNSRBL-SPAM 14.26% BLARSBL 13.91% SPAMHAUS 13.74% KUNDENSERVER 13.37% ROUTING 12.83% RSL 12.58% BLITZEDALL 11.48% IPWHOIS 11.47% BADWHOIS 10.81% DORKS 9.76% HEUR8 8.51% OSSOFT 8.10% BLITZEDHTTP 7.92% DEVNULL 7.21% BASE64 4.76% DNSRBL-DUN 4.59% BLITZEDSOCKS 4.54% DSBLMULTI 3.15% DSN 2.70% FABELSOURCES 2.61% DELINK 1.96% MAILFROM 1.64% KITHRUP 1.49% COMPU 1.48% NJABLDUL 1.33% DORKRELAYS 1.00% PIGS 0.89% OSDUL 0.68% MONKEYFORMMAIL 0.35% BLITZEDWINGATE 0.31% DNSUCE 0.22% OSSMART 0.01% The WEIGHT10 and WEIGHT20 tests are just a weighting system that assigns a weight to each E-mail, based on the spam tests that fail, so they don't really count as spam tests by themselves (although they do catch the most spam). The two best tests by far are SNIFFER ( http://www.sortmonster.com ) at 85.29% and SPAMCOP ( http://www.spamcop.net ) at 69.38% (although SPAMCOP has gone down since last month, when it caught 75.16% of the spam). More information on most of the various spam tests shown above can be found at http://www.declude.com/junkmail/support/ip4r.htm . You can look up an IP address using the Spam Database Lookup tool at http://www.DNSstuff.com . The most recent 20 spams in our spamtraps, and the tests they failed, can be found at http://www.declude.com/spamtrap.htm . -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
