On Thu, Apr 14, 2011 at 22:51, Adam Katz <antis...@khopis.com> wrote: > RCVD_IN_MSPIKE_BL has 99% overlap with the SA3.3 set and 98% with the > SA3.2 set. That leaves 0.6758% of spam uniquely hitting this DNSBL (1% > of its 67.5822%). RCVD_IN_SEMBLACK has the same story, resulting in > 0.5138% unique spam from its 1% non-overlap (though note its lower s/o).
Good point. But what about the ham? if it hits the same spam, but less ham, it's a better rule. --j.