Re: blacklisting by SORBS

From: jdow (jdow_at_earthlink.net)
Date: 08/17/05

  • Next message: Thomas Zehetbauer: "Re: blacklisting by SORBS" 
    To: "For users of Fedora Core releases" <fedora-list@redhat.com>
Date: Tue, 16 Aug 2005 16:39:49 -0700

    From: "Les Mikesell" <lesmikesell@gmail.com>

    > On Tue, 2005-08-16 at 11:01, Thomas Cameron wrote:
    >> I use SpamAssassin and milter-greylist. SA uses blocklists, but it only
    >> assigns a positive score if a blocklist pops, it doesn't reject out of
    >> hand.
    >>
    >> I do *not* reject based on single blocklist entries.
    >
    > That makes sense, but it's what the rest of the world does that
    > matters if you fall in a blacklisted block and want your mail
    > to be accepted by others.

    These are the various SORBS scores in SpamAssassin
    50_scores.cf:score RCVD_IN_SORBS_BLOCK 0
    50_scores.cf:score RCVD_IN_SORBS_DUL 0 0.137 0 1.987
    50_scores.cf:score RCVD_IN_SORBS_HTTP 0 0 0 0.043
    50_scores.cf:score RCVD_IN_SORBS_SOCKS 0 0 0 0.338
    50_scores.cf:score RCVD_IN_SORBS_MISC 0 1.597 0 2.493
    50_scores.cf:score RCVD_IN_SORBS_SMTP 0 1.847 0 2.054
    50_scores.cf:score RCVD_IN_SORBS_WEB 0 0 0 0.007
    50_scores.cf:score RCVD_IN_SORBS_ZOMBIE 0 0.819 0 0

    On the whole these are not very high scores. SORBS is not regarded as
    being all that reliable. So far this week SORBS_DUL is triggering on
    only 22% of spam and is triggering on 0.29% of ham. The other SORBS
    rules aren't even in my top 100 rules.

    Spam Cop gets:
    50_scores.cf:score RCVD_IN_BL_SPAMCOP_NET 0 1.832 0 1.216

    That's another unimpressive set of scores. SpamCop's record here is even
    more dismal. It is hitting on 40% of the spam, which is good; but it is
    hitting on 1.5% of the ham. So it's hitting in the 10th position for ham
    and the 34th position for ham. There are other BLs that perform very much
    better.

    Of course, the BAYES_99 rule is king of the road for spam, 90.47% of spam
    and 0% ham. BAYES_00 hits 93.37% of my ham and 0.16% of my ham. It has a
    fairly hefty negative score here.

    Now, I am NOT running stock Fedora Core 4 SpamAssassin. I had to rip it
    out and go to CPAN to make it "behave" with the options and added rules
    I am using. So stock FC 4 installations may give (will give) worse
    performance.

    (And as an aside the recent SpamAssassin user's list buzz involves
    locally blacklisting uk.geocities.com due to the number of spams for
    throw away sex and other spam that feature uk.geocities.com sites.
    For example, when it makes it back to me THIS email will score high
    due to including those addresses.)

    {^_^} 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Thomas Zehetbauer: "Re: blacklisting by SORBS"

    Relevant Pages

    • Re: How to replace sendmail with postfix?
      ... spamassassin, but anywhere I post an adres, it's always a valid one. ... Also most of the 'ham' is really ham and not spam pretending to be ham. ... generally get one or two false negatives a day, often days go by without any. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: Spamassasin bribed?
      ... Feed the spam to salearn and watch it evaporate away after awhile. ... I have a long mantra about the RIGHT way to use SpamAssassin ... Use per user Bayes. ... user Bayes has some serious advantages when one user's ham is ...
      (Fedora)
    • Re: Spamassassin Default Install
      ... getting SpamAssassin to work largely depends on your email ... (I do this with a spam training ... spam and ham, of course, and in addition old_ham and old_spam. ... strip SA's markup and install its own. ...
      (Fedora)
    • Re: Test driven development
      ... I don't regularly use TDD yet, and one of the reasons is that in many ... a function spam(), so I write tests for it. ... the function and see that I need to write functions ham() and eggs. ... you extract eggs(). ...
      (comp.lang.python)
    • Re: Spam Assassin
      ... According to the documentation of spamassassin you ... should learn with all Spam and all Ham, ... Moritz Franosch ...
      (alt.os.linux.suse)