On Fri, Jul 29, 2005 at 04:25:20PM -0700, jdow wrote: >>From the last few days: >> >> SURBL Hits >> --------------- ------- >> URIBL_PH_SURBL 3 >> URIBL_AB_SURBL 5,342 >> URIBL_XS_SURBL 3,529 >> URIBL_JP_SURBL 14,423 >> URIBL_SC2_SURBL 5,681 >> URIBL_OB_SURBL 11,742 >> URIBL_SC_SURBL 5,097 >> URIBL_WS_SURBL 9,931
> It sure would help to know how may of those hits were on ham vice spam. Very little is hitting on ham. Email: 11881 Autolearn: 0 AvgScore: -51.29 AvgScanTime: 1.72 sec Spam: 3004 Autolearn: 0 AvgScore: 21.54 AvgScanTime: 2.01 sec Ham: 8877 Autolearn: 0 AvgScore: -75.93 AvgScanTime: 1.62 sec Time Spent Running SA: 5.67 hours Time Spent Processing Spam: 1.68 hours Time Spent Processing Ham: 4.00 hours TOP SPAM RULES FIRED ------------------------------------------------------------ RANK RULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM ------------------------------------------------------------ 1 HTML_MESSAGE 2325 6.68 19.57 77.40 52.03 2 URIBL_SBL 1949 5.60 16.40 64.88 0.16 3 DCC_CHECK 1936 5.56 16.29 64.45 1.03 4 URIBL_JP_SURBL 1815 5.21 15.28 60.42 0.02 5 URIBL_OB_SURBL 1636 4.70 13.77 54.46 0.26 6 URIBL_WS_SURBL 1208 3.47 10.17 40.21 0.01 7 MIME_HTML_ONLY 970 2.79 8.16 32.29 3.68 8 SKX_UNKNOWN_RECEIVED 863 2.48 7.26 28.73 12.88 9 URIBL_SC2_SURBL 801 2.30 6.74 26.66 0.00 10 HTML_90_100 741 2.13 6.24 24.67 7.16 11 URIBL_SC_SURBL 659 1.89 5.55 21.94 0.00 12 URIBL_AB_SURBL 631 1.81 5.31 21.01 0.00 13 URIBL_XS_SURBL 620 1.78 5.22 20.64 0.01 14 DNS_FROM_AHBL_RHSBL 582 1.67 4.90 19.37 0.55 15 HTML_FONT_INVISIBLE 446 1.28 3.75 14.85 0.29 16 RCVD_IN_SORBS_DUL 435 1.25 3.66 14.48 0.18 17 SKX_X 416 1.19 3.50 13.85 1.01 18 SKX_FREE 362 1.04 3.05 12.05 3.09 19 RCVD_IN_NJABL_DUL 343 0.99 2.89 11.42 0.19 20 HTML_WEB_BUGS 337 0.97 2.84 11.22 0.69 ------------------------------------------------------------ TOP HAM RULES FIRED ------------------------------------------------------------ RANK RULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM ------------------------------------------------------------ 1 USER_IN_WHITELIST 6887 25.62 57.97 0.00 77.58 2 HTML_MESSAGE 4619 17.19 38.88 77.40 52.03 3 SKX_UNKNOWN_RECEIVED 1143 4.25 9.62 28.73 12.88 4 NO_REAL_NAME 1088 4.05 9.16 8.72 12.26 5 HTML_90_100 636 2.37 5.35 24.67 7.16 6 HTML_FONT_BIG 615 2.29 5.18 7.86 6.93 7 HTML_30_40 536 1.99 4.51 2.03 6.04 8 DNS_FROM_RFC_ABUSE 520 1.93 4.38 9.65 5.86 9 HTML_50_60 479 1.78 4.03 3.36 5.40 10 HTML_60_70 462 1.72 3.89 6.52 5.20 11 HTML_40_50 450 1.67 3.79 6.76 5.07 12 DNS_FROM_RFC_POST 448 1.67 3.77 8.22 5.05 13 SUBJ_ALL_CAPS 354 1.32 2.98 0.63 3.99 14 UPPERCASE_25_50 352 1.31 2.96 0.63 3.97 15 MIME_HTML_ONLY 327 1.22 2.75 32.29 3.68 16 HTML_20_30 327 1.22 2.75 0.70 3.68 17 MAILTO_TO_SPAM_ADDR 297 1.11 2.50 0.90 3.35 18 SKX_FREE 274 1.02 2.31 12.05 3.09 19 HOT_NASTY 261 0.97 2.20 0.77 2.94 20 USER_IN_WHITELIST_TO 212 0.79 1.78 0.07 2.39 ------------------------------------------------------------ -- Clay Irving <[EMAIL PROTECTED]> When I was a little kid we had a sand box. It was a quicksand box. I was an only child... eventually. - Steven Wright
