Do you know of any web pages that list some of these bl lists in a matrix type format 
to compare their functionality?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Thursday, January 22, 2004 7:32 AM
To: [EMAIL PROTECTED]
Subject: Re: Re[2]: [IMail Forum] whitelist and evaluation order



>In my experience, five-ten is not the only
>pre-configured blacklist to yield lots of false
>positives - ybl is pretty bad, too.

Just for clarification, there are about 10 FIVETEN* tests.  Two of them 
(FIVETENIGNORE and FIVETENSRC) list entire ISPs, if they appear to ignore 
spam complaints or a single spam comes from the ISP.  So those two have 
*tons* of false positives -- but other FIVETEN* tests such as FIVETENSINGLE 
and FIVETENWEBFORM fare much better.

YBL is described as "Lists all known Yahoo (and subsidiaries) netblocks, 
worldwide."  Well, if you are looking to block all Yahoo E-mail, it's 
great.  But most people don't want to block Yahoo E-mail!

The moral is that you should understand *what* the spam tests you use are 
designed to block.  Otherwise, you have to trust the organization that 
supplied you with the list (and understand what *their* list of lists is 
designed to block).  For example, the tests that we list are designed to 
block the maximum amount of mail with extremely few false positives.

Another important note is that you should run as few tests as possible if 
you use a pass/fail system (as opposed to a weighted system).  With a 
pass/fail system, every test that you add increases your false 
positives.  With a weighted system, though, you can usually have many more 
tests with fewer false positives.  So how you set up the anti-spam software 
is very important, too.

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to