-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tim Philip writes:
>   Query bl.spamcop.net - 209.237.227.199 209.237.227.199 is
>   hermes.apache.org
> 
>   Since SpamCop started counting, this system has been reported less
>   than 10 times by less than 10 users. It has been sending mail
>   consistently for at least 15.6 days. In the past 15.0 days, it has
>   been listed once for a total of 3 hours
> 
>     In the past week, this system has: Been reported as a source of spam
>     less than 10 times Been witnessed sending mail about 3690 times
> 
> Of note is "In the past 15.0 days, it has been listed once for a total
> of 3 hours". It seems that Spamcop users have a propensity to report
> anything as spam and the Spamcop BL uses these reports to blacklist all
> sorts of systems.

Yes.

> Is it wise to block based on the Spamcop BL?

No, definitely not.

> I find the Spamcop BL gives quite a few FPs so its hard to use it for
> more than just a small amount of SA scoring - currently at 0.75.

Yes.

> Does 209.237.227.199 deliver more mailing lists than just SATALK? If not
> does this mean that people who get SATALK report it as spam to Spamcop?

I think it delivers all the ASF's (fully closed-loop opt-in) lists.

Spamcop's BL is *waaaay* too hair-trigger, and FPs very frequently, so
blocking based on it is the recipient's problem, not Apache's. (we can use
it in SpamAssassin as part of a scoring system; generally that works OK.
but *blocking* based on it is a terrible idea.)

- --j.

> >From: Chris Santerre <[EMAIL PROTECTED]>
> >To: "Spamassassin-Talk (E-mail)" <[EMAIL PROTECTED]>
> >Subject: SATALK on spamcop???  Was: ezmlm warning
> >Date: Mon, 24 May 2004 13:11:23 -0400
> >
> >My server is rejecting some of the posts due to spamcop?? Anyone else
> >getting this?
> >
> >Also I'm being Joe Jobbed by a spammer over the weekend. Yeah me! :)
> >
> >You can see my server messege at the bottom......
> >
> >--Chris
> >
> > >-----Original Message-----
> > >From: [EMAIL PROTECTED]
> > >[mailto:[EMAIL PROTECTED]
> > >Sent: Monday, May 24, 2004 6:52 AM
> > >To: [EMAIL PROTECTED]
> > >Subject: ezmlm warning
> > >
> > >
> > >Hi! This is the ezmlm program. I'm managing the
> > >[EMAIL PROTECTED] mailing list.
> > >
> > >
> > >Messages to you from the spamassassin-users mailing list seem to
> > >have been bouncing. I've attached a copy of the first bounce
> > >message I received.
> > >
> > >If this message bounces too, I will send you a probe. If the
> > >probe bounces,
> > >I will remove your address from the spamassassin-users mailing list,
> > >without further notice.
> > >
> > >
> > >I've kept a list of which messages from the spamassassin-users
> > >mailing list have
> > >bounced from your address.
> > >
> > >Copies of these messages may be in the archive.
> > >To retrieve a set of messages 123-145 (a maximum of 100 per request),
> > >send an empty message to:
> > >   <[EMAIL PROTECTED]>
> > >
> > >To receive a subject and author list for the last 100 or so messages,
> > >send an empty message to:
> > >   <[EMAIL PROTECTED]>
> > >
> > >Here are the message numbers:
> > >
> > >  *snip a BUNCH*
> > >--- Enclosed is a copy of the bounce message I received.
> > >
> > >Return-Path: <>
> > >Received: (qmail 38071 invoked for bounce); 12 May 2004 17:41:30 -0000
> > >Date: 12 May 2004 17:41:30 -0000
> > >From: [EMAIL PROTECTED]
> > >To: [EMAIL PROTECTED]
> > >Subject: failure notice
> > >
> > >Hi. This is the qmail-send program at apache.org.
> > >I'm afraid I wasn't able to deliver your message to the
> > >following addresses.
> > >This is a permanent error; I've given up. Sorry it didn't work out.
> > >
> > ><[EMAIL PROTECTED]>:
> > >204.x.x.x does not like recipient.
> > >Remote host said: 553 5.3.0
> > ><[EMAIL PROTECTED]>... spamcop.net Please email
> > >[EMAIL PROTECTED]
> > >Giving up on 204.x.x.x.
> > >
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFAs4HEQTcbUG5Y7woRAtT6AKCLrSINdICUJfYULmyXU/LfeUXw7QCdHfHm
inyHgk74BDTlecEd/R2EhzE=
=X5JR
-----END PGP SIGNATURE-----

Reply via email to