From: "Tim Philip" <[EMAIL PROTECTED]>
> Query bl.spamcop.net - 209.237.227.199
> 209.237.227.199 is hermes.apache.org
>
> Since SpamCop started counting, this system has been reported
> less than 10 times by less than 10 users. It has been sending mail
> consistently for at least 15.6 days. In the past 15.0 days, it has
> been listed once for a total of 3 hours
>
> In the past week, this system has:
> Been reported as a source of spam less than 10 times
> Been witnessed sending mail about 3690 times
>
> Of note is "In the past 15.0 days, it has been listed once for a total of
3
> hours". It seems
> that Spamcop users have a propensity to report anything as spam and the
> Spamcop BL
> uses these reports to blacklist all sorts of systems.
>
> Is it wise to block based on the Spamcop BL?
>
> I find the Spamcop BL gives quite a few FPs so its hard to use it for more
> than just a
> small amount of SA scoring - currently at 0.75.
>
> Does 209.237.227.199 deliver more mailing lists than just SATALK? If not
> does this mean
> that people who get SATALK report it as spam to Spamcop?
Tim, if I were a spammer software author that is something I would do
intentionally as a harassment technique. I rather expect a lot of that
sort of thing to happen which is why I bypass SpamAssassin entirely
for messages involving this list.
{^_-}
