27 Sep
2004
27 Sep
'04
11:28 p.m.
On Monday, September 27, 2004, 4:11:16 PM, Patrik Nilsson wrote:
How many of those that currently get listed have name servers listed in SBL at the time they get listed?
I don't have stats currently, but there is certainly overlap.
If a substantial part do have their name server listed in SBL, have you considered using that type of data as an aid to filter out FPs in real time?
Lack of inclusion in SBL can and probably should be a flag to check for FPs, but there are spam domains, especially new ones, that sometimes don't match SBL, for example due to using a new name server or hosting IP space.
SBL inclusion or non-inclusion is definitely a useful spam versus ham heuristic however.
Jeff C. -- "If it appears in hams, then don't list it."