Below are some stats from our incoming mail since midnight 23/04/05. I'm not
going to go into too deep an analysis as it's the weekend and I'm too
'tired' to do that ;).
Total nbr of messages with at least one ??_SURBL hit over the last 22 hours
was around 1.4 million. The counts below show how many triggered as 'spam'
("result: Y"), and how many didn't trigger ("result: ."). This is based on
our Spam Assassin default threshold of 8, but we have many custom rules so
spam threshold is really only meaningful to our config - YMMV ;). We don't
currently block or tag via SURBL/RBL at the MTA layer - everything goes
through SA.
XS popped up reasonably frequently in all SURBL hits - and we had 10456 XS
spam hits where it wasn't listed in any other URIBL (unable to say how many
false-positives out of that list, but our default tagging threshold is high
in SA and FP's are vanishingly small).
Anyway - make of it as you will. SURBL rocks anyway - XS *may* be a useful
addition.
Cheers
Paul
--
---
List of all messages (spam and non-spam) that included a SURBL hit:
report01:/tmp# wc surbl-2005-04-23.log
1447355
SURBL XS Non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep XS_SURBL|grep -c "result: ."
6283
SURBL XS Spam (including messages that had other SURBL hits)
report01:/tmp# cat surbl-2005-04-23.log|grep XS_SURBL|grep -c "result: Y"
939134
---
Nbr of XS spam hits that weren't in any other SURBL lists:
report01:/tmp# cat surbl-2005-04-23.log| egrep -v
"URIBL_AB_SURBL|URIBL_OB_SURBL|URIBL_PH_SURBL|URIBL_SC_SURBL|URIBL_WS_SURBL|URIBL_JP_SURBL"
|grep -c "result: Y"
10456
--
Nbr of non-spam XS hits (not in any other SURBL lists):
report01:/tmp# cat surbl-2005-04-23.log|egrep -v
"URIBL_AB_SURBL|URIBL_OB_SURBL|URIBL_PH_SURBL|URIBL_SC_SURBL|URIBL_WS_SURBL|URIBL_JP_SURBL"
|grep -c "result: ."
5300
---
AB non spam
report01:/tmp# cat surbl-2005-04-23.log|grep AB_SURBL|grep -c "result: ."
604
AB spam
report01:/tmp# cat surbl-2005-04-23.log|grep AB_SURBL|grep -c "result: Y"
521886
---
WS non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep WS_SURBL|grep -c "result: ."
12578
WS spam
report01:/tmp# cat surbl-2005-04-23.log|grep WS_SURBL|grep -c "result: Y"
996200
---
JP non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep JP_SURBL|grep -c "result: ."
4376
JP spam
report01:/tmp# cat surbl-2005-04-23.log|grep JP_SURBL|grep -c "result: Y"
1234602
---
OB non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep OB_SURBL|grep -c "result: ."
36760
OB spam
report01:/tmp# cat surbl-2005-04-23.log|grep OB_SURBL|grep -c "result: Y"
1139181
---
SC non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep SC_SURBL|grep -c "result: ."
1095
SC spam
report01:/tmp# cat surbl-2005-04-23.log|grep SC_SURBL|grep -c "result: Y"
751549
---
PH non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep PH_SURBL|grep -c "result: ."
1
PH spam
report01:/tmp# cat surbl-2005-04-23.log|grep PH_SURBL|grep -c "result: Y"
383
