|
I would submit this to the folks at SURBL.
>From their website
" Please contact us
at whitelist at surbl dot org if you know of any legitimate,
non-spam-referenced domains that should be added to our whitelist, thus
preventing them from getting on the blocklists. When writing, please send us the
original message with full
headers and an explanation of why the domain should
not be listed. "
They are very proactive at removing false
positives. In the meantime you can add that domain to the
invURI-Exceptions.txt and that domain will be skipped.
Darrell
------------------------------------------- Check out http://www.invariantsystems.com for
utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring,
SURBL integration, MRTG Integration, and Log Parsers.
----- Original Message -----
Sent: Sunday, January 09, 2005 2:56
AM
Subject: Re: [Declude.JunkMail] Sniffer
vs. SURBL
I was just playing with this today - I'm not sure I'd put much
faith in surbl.org. The first two messages I saw it tag in my own inbox, were
very legitimate. In fact, one of them was from Wells Fargo (*really*
from Wells Fargo, sent from Wells Fargo's own mail servers). I find this
ironic, since one of their new features, is whitelisting publicly traded
companies. :)
Jonathan
At 12:30 AM 1/9/2005, you wrote:
Hi,
Today I finally took
the time (I didn't have) and ran both Sniffer and SURBL Tests (using http://www.invariantsystems.com/invURIBL/).
Result:
1,860 tagged by invURIBL only -> gain over Sniffer = 21%
8,926 tagged by BOTH invURIBL AND Sniffer
962 tagged by Sniffer only -> gain over invURIBL =
11%
In other
words:
If I ran ONLY Sniffer, I
would have missed 21% of additional messages that were detected by checking
against SURBL.
If I tested SURBL only, I would have missed 11% of
messages (that only Sniffer found)
I have configured Declude, so that the
two tests are complimentary (no extra weight BOTH tests vs. ONE test
fails.)
My
conclusion:
Both Sniffer and
invURIBL are worth their money...
PS: here the "raw" numbers:
DLAnalyzer(4.0.5 - 12/21/2004) Report
Generated At 1/9/2005 12:48:14 AM For Argos.net
Breakdown Of Messages
That Failed: INV-URIBL
Messages That Matched:
10,786
TEST
# FAILED
Percentage
IPNOTINMX..........10,372.......96.16%
SNIFFER.............8,926.......82.76%
NOLEGITCONTENT......8,673.......80.41%
SPAMCOP.............4,983.......46.20%
SORBS...............4,521.......41.92%
XBL-DYNA............4,470.......41.44%
Breakdown Of Messages That Failed:
SNIFFER
Messages That Matched:
9,888
TEST
# FAILED
Percentage
IPNOTINMX...........9,611.......97.20%
INV-URIBL...........8,926.......90.27%
NOLEGITCONTENT......8,788.......88.88%
SPAMCOP.............5,208.......52.67%
XBL-DYNA............4,672.......47.25%
SORBS...............4,664.......47.17%
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20
(Business)
Fax: +1 201 934-9206
|
