FWIW, I tested and studied results from FIVETEN for several weeks, and it (by far) returned more false positives than any other blacklist I have used to date. I would not even recommend utilizing it in a weighting system. I found the amount of false positives FIVETEN returned to be WELL over 1%, which is about the upper level of comfort for me for any single blacklist. Even on a relatively low-volume mail server, using it as a way to identify and delete spam will cause far more harm than good, at least that is the conclusion that I arrived at. It will catch a lot of spam, but the "collateral damage" will also be significant. Now that I think about it, there is only one blacklist that returns more false positives than FIVETEN, and that is the XBL (xbl.selwerd.cx) list. Almost anything connected to the internet will be blacklisted by XBL. I think that XBL should just publish a whitelist instead, as their blacklist seems to cover damned near the entire 'net! Everything but my Palm Pilot in included on their blacklist, and I'm not so sure that they don't have a record of IT somewhere either! :-)
William Van Hefner System Administrator TheDigest.Com/TelCompare.Com > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry > Sent: Thursday, September 18, 2003 1:37 PM > To: [EMAIL PROTECTED] > Subject: Re: [IMail Forum] Anti-Spammers > > > > >I have removed the following anti-spammers: > > > > fiveten > > v6net > > ybl > > > >Originally, an IMail technician suggested that I disable one of these > >three, which I did. > > Note that FIVETENIGNORE (one of the numerous FIVETEN* tests) > blocks lots of > legitimate mail, and YBL is designed just to block all Yahoo E-mail. ABL > (v6net.org) is also "willing to block large ISPs". > > For the same reason that you are listed in the URBL spam database, you > should go to http://www.declude.com/junkmail/support/ip4r.htm to find out > about spam tests before using them. :) > > >Later, I removed the other two, but I can't remember which is > >which. Since removing the latter two, I've been and am being inundated > >with spam. Can you please advise which one I should avoid as I > would like > >to re-introduce the other two. > > The ABL, FIVETENIGNORE, and YBL should not be used to block > E-mail, unless > you do not mind false positives. > > What you may want to do is use the other FIVETEN* tests, which do not > knowingly block legitimate mailservers. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
