From: "Chris Santerre" csanterre@MerchantsOverseas.com To: "SURBL Discussion List (E-mail)" discuss@lists.surbl.org; "Spamassassin-Talk (E-mail)" spamassassin-users@incubator.apache.org Sent: Wednesday, January 05, 2005 9:15 AM Subject: [SURBL-Discuss] quick poll on SURBL hit %
Just curious as to what average percent of spam people see SURBL hitting.
In
a non scientific manor, I average about 85% or greater hitting SURBL for
all
spam that doesn't get rejected by my MTA. I have a feeling if I clean up
my
results a bit, that number would be even higher.
Chris Santerre
[..]
This is for the last week or so of email (note about 4 days ago I changed the rule name uribl_sbl to uribl_sblxbl (and the zone it pointed to) so those stats are a little off). Also note that for about 3 days I was having massive timeouts trying to resolve names in the multi.surbl.org zone. I have since setup a local copy of that zone.
Ranking of Tests in Blocked Spam: ( 1121 Blocked ) -------------------------------------------------- (top 30 of 715 rules triggered) % 76.8 861 : HTML_MESSAGE % 52.3 586 : MIME_HTML_ONLY % 41.7 467 : URIBL_SBL % 25.2 282 : URIBL_WS_SURBL % 23.0 258 : MPART_ALT_DIFF % 21.4 240 : URIBL_OB_SURBL % 17.8 199 : RATWARE_ZERO_TZ % 17.7 198 : HTML_90_100 % 17.6 197 : URIBL_JP_SURBL % 16.8 188 : DRUGS_ERECTILE % 16.1 180 : MIME_BASE64_TEXT % 16.1 180 : SARE_MULT_RATW_02 % 14.8 166 : MSGID_FROM_MTA_ID % 14.0 157 : MIME_BOUND_DD_DIGITS % 13.2 148 : MIME_HTML_ONLY_MULTI % 12.8 143 : AWL % 12.3 138 : HTML_40_50 % 12.0 135 : BIZ_TLD % 12.0 134 : URIBL_SC_SURBL % 11.6 130 : HTML_30_40 % 10.8 121 : HTML_FONT_BIG % 10.2 114 : DRUGS_ERECTILE_OBFU % 10.2 114 : X_MESSAGE_INFO % 10.1 113 : DRUGS_PAIN % 9.8 110 : LONGWORDS % 9.3 104 : BAYES_99 % 9.2 103 : RCVD_BY_IP % 8.8 99 : HTML_TEXT_AFTER_BODY % 8.7 98 : MIME_QP_LONG_LINE % 8.4 94 : HTML_IMAGE_RATIO_02
Ranking of Tests in Tagged Spam: ( 297 Tagged ) ----------------------------------------------- (top 30 of 322 rules triggered) % 65.3 194 : HTML_MESSAGE % 37.0 110 : MIME_HTML_ONLY % 36.7 109 : URIBL_SBL % 25.6 76 : AWL % 25.3 75 : HTML_90_100 % 15.5 46 : HTML_TEXT_AFTER_BODY % 15.2 45 : HTML_IMAGE_RATIO_02 % 13.8 41 : HTML_TEXT_AFTER_HTML % 12.5 37 : MSGID_FROM_MTA_ID % 11.8 35 : HTML_FONT_BIG % 9.8 29 : HTML_80_90 % 8.8 26 : TO_ADDRESS_EQ_REAL % 7.7 23 : MIME_QP_LONG_LINE % 7.4 22 : BAYES_50 % 7.4 22 : MPART_ALT_DIFF % 7.1 21 : URIBL_WS_SURBL % 6.4 19 : HTML_TAG_EXIST_TBODY % 6.1 18 : HTML_IMAGE_ONLY_16 % 5.1 15 : HTML_IMAGE_ONLY_20 % 5.1 15 : FORGED_RCVD_HELO % 4.7 14 : NO_REAL_NAME % 4.4 13 : HTML_IMAGE_ONLY_12 % 4.4 13 : SARE_HTML_HTML_AFTER % 4.4 13 : HELO_DYNAMIC_IPADDR2 % 4.0 12 : MIME_HTML_MOSTLY % 4.0 12 : RCVD_NUMERIC_HELO % 3.7 11 : DOMAIN_RATIO % 3.7 11 : DATE_IN_FUTURE_12_24 % 3.4 10 : HTML_MIME_NO_HTML_TAG % 3.4 10 : MIME_BASE64_TEXT
-Matt