On Fri, 18 Dec 2009, John Hardin wrote:
On Fri, 18 Dec 2009, Justin Mason wrote:
> > > Or we could have the whitelist rules in a meta such that they only
> > > hit when a blacklist rule doesn't, if this is a common enough
> > > problem. It might also allow people to get past the high negative
> > > score for the whitelists.
it can be measured by finding the WL rule's page on
ruleqa.spamassassin.org, then examining the OVERLAP section for overlaps
with BL rules.
As of last weekend's network masscheck:
T_RCVD_IN_RP_CERTIFIED
SPAM% 0.0851 126 of 148025 messages
HAM% 0.3738 746 of 199558 messages
S/O 0.63
RANK 0.185
overlap spam: 60% of T_RCVD_IN_RP_CERTIFIED hits also hit __RCVD_IN_BRBL;
overlap spam: 58% of T_RCVD_IN_RP_CERTIFIED hits also hit __RCVD_IN_ZEN;
overlap spam: 26% of T_RCVD_IN_RP_CERTIFIED hits also hit __RCVD_IN_SORBS;
T_RCVD_IN_RP_CERTIFIED
SPAM% 0.0851 126 of 148025 messages HAM% 0.3738 746 of 199558 messages
S/O 0.185 RANK 0.63
Frack.
T_RCVD_IN_RP_SAFE
SPAM% 0.0851 126 of 148025 messages
HAM% 2.1367 4264 of 199558 messages
S/O 0.038
RANK 0.80
overlap spam: 60% of T_RCVD_IN_RP_SAFE hits also hit __RCVD_IN_BRBL;
overlap spam: 58% of T_RCVD_IN_RP_SAFE hits also hit __RCVD_IN_ZEN;
overlap spam: 26% of T_RCVD_IN_RP_SAFE hits also hit __RCVD_IN_SORBS;
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
7 days until Christmas
