RE: [Declude.JunkMail] SpamCop, OSSRC, and OSSOFT Tests
Thanks John and Terry. I think I have a very good plan of attack. Both of your replies were very insightful. Ron -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com] On Behalf Of Smart Business Lists Sent: Tuesday, November 12, 2002 10:39 AM To: Ron Harris Subject:Re: [Declude.JunkMail] SpamCop, OSSRC, and OSSOFT Tests Ron, Tuesday, November 12, 2002 you wrote: RH I currently Hold a lot of e-mail failing a lot of the open relay tests. The only two tests I hold directly are ORDB and SNIFFER. ORDB is about 99% for me and SNIFFER is less but still very high. Mainly SNIFFER fails on lists and personal messages from people who have spam domain addresses. ORDB only catches about 3.6% of our failed messages so it is not a big deal one way or the other. RH I am considering holding SpamCop and OSSRC also. I have not RH noticed any legitimate e-mail failing these two tests. Can you RH reply with some opinions please? SPAMCOP is my number 3 test in terms of number of failed messages. It ranks at 60.22% of failed messages compared to SNIFFER's 75.5%. But it fails too many legitimate messages for my users. OSSRC ranks 12th at 14.3% of failed messages but it also fails too many messages for me to hold on it alone. However, I weight both SPAMCOP and OSSRC so that any other test failed with them will trigger a HOLD. Keep in mind that we monitor HOLD and on average have to unhold about 2% of filtered messages. RH Also, I currently hold e-mail failing the OSSOFT, which will hold RH Yahoo mail. How does everyone else handle this issue? I weight OSSOFT the same as SPAMCOP and OSSRC. It fails about 4% of our failed messages. But I think that every user community is probably different and ours certainly changes over time so I do monitor and tweak these settings frequently. HTH Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SpamCop, OSSRC, and OSSOFT Tests
I currently give a weight of 16 to SpamCop, forcing the message to either fail 2 minor tests or one other major test. (Subject modification 15-19, hold at 20.) Here is what Declude has to say about OSSRC: Osirusoft's Confirmed Spam Source list. These are sites that continually spam and have been manually added, after multiple nominations. Apparently the same as Spews. Warning: Lists a number of legitimate mail servers that happen to have the same Class C address space as spammers. Has TXT records. Therefore, I do not use it, as it is guilty by association. Here is what Declude has to say about OSSOFT: Osirusoft's list of Spamware Software Developers. It is believed that these are IP ranges of companies that are known to produce spam software. Similar to or the same as SPAMHAUS/SBL test. Has TXT records. I have given this test a weight of 2. My thinking is that although they are known to produce SPAM, they have not been shown very in-effective in Scott's monthly log. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SpamCop, OSSRC, and OSSOFT Tests
Ron, Tuesday, November 12, 2002 you wrote: RH I currently Hold a lot of e-mail failing a lot of the open relay tests. The only two tests I hold directly are ORDB and SNIFFER. ORDB is about 99% for me and SNIFFER is less but still very high. Mainly SNIFFER fails on lists and personal messages from people who have spam domain addresses. ORDB only catches about 3.6% of our failed messages so it is not a big deal one way or the other. RH I am considering holding SpamCop and OSSRC also. I have not RH noticed any legitimate e-mail failing these two tests. Can you RH reply with some opinions please? SPAMCOP is my number 3 test in terms of number of failed messages. It ranks at 60.22% of failed messages compared to SNIFFER's 75.5%. But it fails too many legitimate messages for my users. OSSRC ranks 12th at 14.3% of failed messages but it also fails too many messages for me to hold on it alone. However, I weight both SPAMCOP and OSSRC so that any other test failed with them will trigger a HOLD. Keep in mind that we monitor HOLD and on average have to unhold about 2% of filtered messages. RH Also, I currently hold e-mail failing the OSSOFT, which will hold RH Yahoo mail. How does everyone else handle this issue? I weight OSSOFT the same as SPAMCOP and OSSRC. It fails about 4% of our failed messages. But I think that every user community is probably different and ours certainly changes over time so I do monitor and tweak these settings frequently. HTH Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SpamCop, OSSRC, and OSSOFT Tests
I have given this test a weight of 2. My thinking is that although they are known to produce SPAM, they have not been shown very in-effective in Scott's monthly log. Darn keyboard virus. Let me try that again. ...they have not been shown to be very effective in... John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
