SURBL scoring

Mark Nienberg mark at TIPPINGMAR.COM
Mon Jul 12 19:34:19 IST 2004


I had intended to wait for SA3 to use the new SURBL system, but Steve Swaney
made the installation so simple that I went ahead and did it generally according to his
information at

http://www.fsl.com/support/index.html

although I used CPAN to install SpamCopURI (and allowed it to find and install the
other URI dependency).  I then copied Steve's surbl_uri_cf file, and followed his
testing procedure.

My only question regards the scoring for the 4 tests.  My logs show a great deal of
overlap in the 4 lists.  It is fairly common to see all 4 triggered by one message
(resulting in 15 points).  3 hits is very common (about 9 points).  One or two hits
seems fairly uncommon in the mail we receive.

If the tests aren't very independent, should I reduce the scores when using more
than one test?  We delete mail that scores over 12, so with these cumulative scores
a false positive could result in lost mail.  Should I worry about that?  Thanks,
--
Mark W. Nienberg, SE
Tipping Mar + associates
1906 Shattuck Ave, Berkeley, CA  94704
visit our website at http://www.tippingmar.com

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list