PM
Subject: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]Re[2]: [sniffer]A design
question - how many DNS based tests?
Hello Darin,
Wednesday, June 7, 2006, 5:09:27 PM, you wrote:
>>That would be a bad idea, sorry. After 30 days (heck, after 2) spam is
>>usually long-since filtered, o
Hello Darin,
Wednesday, June 7, 2006, 5:09:27 PM, you wrote:
>>That would be a bad idea, sorry. After 30 days (heck, after 2) spam is
>>usually long-since filtered, or dead. As a result, looking at 30 day
>>old spam would have a cost, but little benefit.
> You misinterpreted what I was saying.
>> This also got me thinking of the flip side, spam reporting. There's a
>> significant untapped load of spam that sniffer doesn't fail that we
filter.
>> I was thinking about creating a filter to copy your spam@ address with
>> messages that get moved to our archive (we archive held spam for 30 d
Hello Darin,
Tuesday, June 6, 2006, 7:49:37 PM, you wrote:
> This also got me thinking of the flip side, spam reporting. There's a
> significant untapped load of spam that sniffer doesn't fail that we filter.
> I was thinking about creating a filter to copy your spam@ address with
> messages t
ssed for FPs.
Thoughts?
Darin.
- Original Message -
From: "Pete McNeil" <[EMAIL PROTECTED]>
To: "Message Sniffer Community"
Sent: Tuesday, June 06, 2006 7:29 PM
Subject: [sniffer]Re[2]: [sniffer]A design question - how many DNS based
tests?
Hello Matt,
Tu
Hello Matt,
Tuesday, June 6, 2006, 12:37:56 PM, you wrote:
> appropriately and tend to hit less often, but the FP issues with
> Sniffer have grown due to cross checking automated rules with other
> lists that I use, causing two hits on a single piece of data. For
> instance, if SURBL has an FP
n Colbeck, Andrew
> Gesendet: Dienstag, 6. Juni 2006 18:09
> An: Message Sniffer Community
> Betreff: Re: [sniffer]A design question - how many DNS based tests?
>
> I use just shy of 60 DNS based tests against the sender, both
> IP4R and RHSBL.
>
> Perhaps 10-12 matter.
&g
I have 46 RBL's configured, though 16 are configured to score
differently on last hop and prior hops. I would say that more than 35
of these are things that I would not like to lose.
I weight most RBL's at around half of my Hold weight in Declude. False
positives on my system typically hit a
To: Message Sniffer Community
> Subject: [sniffer]A design question - how many DNS based tests?
>
> Hello Sniffer Folks,
>
> I have a design question for you...
>
> How many DNS based tests do you use in your filter system?
>
> How many of them really matter?
l
Spam tests: http://it.farmprogress.com/declude/spamtestbymonth.html
ham tests: http://it.farmprogress.com/declude/hamtestsbymonth.html
- Original Message -
From: "Pete McNeil" <[EMAIL PROTECTED]>
To: "Message Sniffer Community"
Sent: Tuesday, June 06, 2006 8:26 AM
Subject: [sn
gt; -Original Message-
> From: Message Sniffer Community [mailto:[EMAIL PROTECTED]
> Behalf Of Pete McNeil
> Sent: Tuesday, June 06, 2006 9:26 AM
> To: Message Sniffer Community
> Subject: [sniffer]A design question - how many DNS based tests?
> Hello Sniffer Folks,
Hi Pete,
Pete McNeil wrote:
How many DNS based tests do you use in your filter system?
approx 100
How many of them really matter?
depends :)
I generally weight them all very low; its the combination of several
that make each 'matter'. As I review held mail I remove ones that are
b
Hi _M,
Do you mean like reverse PTR records, or HELO lookups, etc..?
--Paul R.
-Original Message-
From: Message Sniffer Community [mailto:[EMAIL PROTECTED]
Behalf Of Pete McNeil
Sent: Tuesday, June 06, 2006 9:26 AM
To: Message Sniffer Community
Subject: [sniffer]A design question - how
Hello Sniffer Folks,
I have a design question for you...
How many DNS based tests do you use in your filter system?
How many of them really matter?
Thanks!
_M
--
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.
#
This message
14 matches
Mail list logo
