SURBL scoring
Mark Nienberg
mark at TIPPINGMAR.COM
Mon Jul 12 19:34:19 IST 2004
I had intended to wait for SA3 to use the new SURBL system, but Steve Swaney
made the installation so simple that I went ahead and did it generally according to his
information at
http://www.fsl.com/support/index.html
although I used CPAN to install SpamCopURI (and allowed it to find and install the
other URI dependency). I then copied Steve's surbl_uri_cf file, and followed his
testing procedure.
My only question regards the scoring for the 4 tests. My logs show a great deal of
overlap in the 4 lists. It is fairly common to see all 4 triggered by one message
(resulting in 15 points). 3 hits is very common (about 9 points). One or two hits
seems fairly uncommon in the mail we receive.
If the tests aren't very independent, should I reduce the scores when using more
than one test? We delete mail that scores over 12, so with these cumulative scores
a false positive could result in lost mail. Should I worry about that? Thanks,
--
Mark W. Nienberg, SE
Tipping Mar + associates
1906 Shattuck Ave, Berkeley, CA 94704
visit our website at http://www.tippingmar.com
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
More information about the MailScanner
mailing list