Re: [Declude.JunkMail] Sniffer Invuribl

2005-10-03 Thread Scott Fisher



One potential area of concern is that Sniffer will 
add rules for domains listed on surbl.
So a domain could potentiallyincorrectly get 
listed in surbl and then in Sniffer. Causing both tests to false 
positive.

So there is some overlap between the 
tests.

That said,
I think surbl.org and Sniffer both work hard to 
eliminate false positives so the event when it happens should be mighty 
rare.

So having the combined score of 28 weighted below 
30 could be a good thing

  - Original Message - 
  From: 
  Serge 
  To: Declude.JunkMail@declude.com 
  
  Sent: Sunday, October 02, 2005 12:23 
  PM
  Subject: [Declude.JunkMail] Sniffer  
  Invuribl
  
  Hi all,
  
  I have been using sniffer for a year and recently 
  add INVURIBL.
  i am trying to find the corrolation between the 2 
  test to set the weight.
  I tag at 10 and delete at 30..
  I had sniffer at 14.
  nowi added invuribl with a max weight of 
  14.
  i have spamcop at 9.
  and a set of negative weight filter to compensate 
  for most FP.
  Should i lower sniffer now that I added Invuribl 
  ?
  (this is an isp setting)
  


[Declude.JunkMail] Sniffer Invuribl

2005-10-02 Thread Serge



Hi all,

I have been using sniffer for a year and recently 
add INVURIBL.
i am trying to find the corrolation between the 2 
test to set the weight.
I tag at 10 and delete at 30..
I had sniffer at 14.
nowi added invuribl with a max weight of 
14.
i have spamcop at 9.
and a set of negative weight filter to compensate 
for most FP.
Should i lower sniffer now that I added Invuribl 
?
(this is an isp setting)



[Declude.JunkMail] Sniffer Invuribl

2005-10-02 Thread Serge



Hi all,

I have been using sniffer for a year and recently 
add INVURIBL.
i am trying to find the corrolation between the 2 
test to set the weight.
I tag at 10 and delete at 30..
I had sniffer at 14.
nowi added invuribl with a max weight of 
14.
i have spamcop at 9.
and a set of negative weight filter to compensate 
for most FP.
Should i lower sniffer now that I added Invuribl 
?
(this is an isp setting)



Re: [Declude.JunkMail] Sniffer Invuribl

2005-10-02 Thread Pete McNeil
On Sunday, October 2, 2005, 1:23:21 PM, Serge wrote:

S Hi all,
S  
S I have been using sniffer for a year and recently  add INVURIBL.
S i am trying to find the corrolation between the 2  test to set the weight.
S I tag at 10 and delete at 30..
S I had sniffer at 14.
S now i added invuribl with a max weight of  14.
S i have spamcop at 9.
S and a set of negative weight filter to compensate  for most FP.
S Should i lower sniffer now that I added Invuribl  ?
S (this is an isp setting)

I'm pretty sure the only reason to decrease a weight would be if a
test became less accurate... so you should probably leave it as it is.
Presumably, if both tests hit you would be _very sure_ it was spam.

MHO

Hope this helps,

_M

  

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Sniffer Invuribl

2005-10-02 Thread Erik
Presumably, if both tests hit you would be _very sure_ it was spam.

Presumably, yes... Be careful about deleting on that combination, here are
false positives with tests failing both SNIFFER and INVURIBL.

Awhile back (thanks Scott Fisher), I asked the list about COUNTRY tests.
One of the tests I had was using the TESTSFAILED that included both SNIFFER
and INVURIBL in a combo test.  Then the COUNTRY test was used to see if that
email originated outside of USA and/or started in USA then bounced to
another country, then back to USA.  In our testing, those that failed those
2 tests, were indeed SPAM.  But on some emails that filed both our combo
test (SNIFFER and INVURIBL) and originated in USA and destined to USA, were
true emails.  Ironically, these emails do not fail the ROUTING test in
Declude.

I would recommend using the TESTSFAILED for SNIFFER and INVURIBL and then
another one testing that combo test with the use of another external
filter for COUNTRY.

Erik


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil
Sent: Sunday, October 02, 2005 12:19 PM
To: Serge
Cc: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Sniffer  Invuribl


On Sunday, October 2, 2005, 1:23:21 PM, Serge wrote:

S Hi all,
S  
S I have been using sniffer for a year and recently  add INVURIBL. i am 
S trying to find the corrolation between the 2  test to set the weight. 
S I tag at 10 and delete at 30.. I had sniffer at 14.
S now i added invuribl with a max weight of  14.
S i have spamcop at 9.
S and a set of negative weight filter to compensate  for most FP.
S Should i lower sniffer now that I added Invuribl  ?
S (this is an isp setting)

I'm pretty sure the only reason to decrease a weight would be if a test
became less accurate... so you should probably leave it as it is.
Presumably, if both tests hit you would be _very sure_ it was spam.

MHO

Hope this helps,

_M

  

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.