Hello Shawn,

Tuesday, June 17, 2003 you wrote:
SA> wrapping spamd in an NT service -- I thought I would check to see
SA> if there is anyone out there working on it first.

No, I didn't work on that but thought I'd reply with what I finally
did for spam on my xmail system.

I finally did make spamassassin work on my win2k server with
considerable effort. But I didn't like it very much. I felt like it
involved too much effort to maintain the rule base and it looked to me
like it was going to be difficult to make the service work. Also, I
don't have much confidence that future development on SpamAssassin
will be Windows friendly.

We use Sniffer by http://www.sortmonster.com/MessageSniffer/ on our
Imail system called by DECLUDE and it is very effective for us. Our
top tests for spam in June to date:

     Test           All Mail   SPAM
     -------------  --------   ------
     SNIFFER        53.98%     95.2%
     EASYNET-DNSBL  40.34%     na
     SPAMCOP        32.76%     na
     BADHEADERS     25.22%     na
     REVDNS         21.62%     na
     NOABUSE        19.62%     na
     NOPOSTMASTER   18.82%     na
     

This means that of all messages processed 53.98% failed one or more
SNIFFER tests and of those failed messages 95.2% were actually SPAM
messages that were intercepted and deleted before delivery to the
recipient. The 4.8% mostly is handled by exception rules and for the
most part is mailing list messages. EASYNET-DNSBL and SPAMCOP are both
ip4r DNS tests (see http://www.declude.com/junkmail/support/ip4r.htm
for a list and brief description).  BADHEADERS test checks for certain
header formatting.  REVDNS checks whether a reverse dns exists for the
sender.  NOABUSE and NOPOSTMASTER test the presence of those accounts
on the sender's system.

We run a total of 65 tests but really I could eliminate most of them
except SNIFFER and achieve almost the same result. It is $25 per month
for the service but the rule base is updated frequently - sometimes
several times in one day.

I thought when I get a bit more time I'd finish the filter program
that calls SNIFFER and make it available to the community.


Terry Fritts


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to