-----Original Message----- From: Jeff Chan [mailto:jeffc@surbl.org] Sent: Tuesday, June 29, 2004 1:21 AM To: SURBL Discuss Subject: Re: [SURBL-Discuss] Pleaae beta test ds.surbl.org - 6dos data
On Monday, June 28, 2004, 7:46:16 PM, David Coulson wrote:
Jeff Chan wrote:
Please do not use ds.surbl.org for production mail servers as it is hosted only on my name server.
Even though it took a day to load (almost), I've got it
running on ns10
if you want to add that to the NS glue.
Thanks David. I'd like to see what kind of false positive rates we see before committing to running it for real.
As a data point, 6dos hit 300 whitelist entries out of 120,000 records, which is about a ten times greater whitelist hit *rate* than ob.surbl.org.
0.25% fp rate, so it has an S/O rating of 99.75 :)
Actually that is great info. Can we get the whitelist hits? This might be a great way to tweak the 6dos list. I'm also very interested in who hit the whitelist. I'd like to see the xref in 6dos to see who these people are dealing with. I think RSK would be interested as well.
Even if we have to clean up 1-2% of these listed, look how many evil domains we get. But I fully understand your philosophy on this Jeff. Some of these evil domains may not have spammed.....yet. ;)
--Chris
On Tuesday, June 29, 2004, 7:12:38 AM, Chris Santerre wrote:
From: Jeff Chan [mailto:jeffc@surbl.org]
As a data point, 6dos hit 300 whitelist entries out of 120,000 records, which is about a ten times greater whitelist hit *rate* than ob.surbl.org.
0.25% fp rate, so it has an S/O rating of 99.75 :)
No, that's not an FP rate since my whitelist does not include every possible FP. In fact, it's rather limited. More like the 1000 most common web domains plus many more obscure geographic tlds that will probably never be used in spams.
The whitelist hits might give a hint at relative FP rates between lists, but only actual testing against real messages will give meaningful FP rates.
Actually that is great info. Can we get the whitelist hits? This might be a great way to tweak the 6dos list. I'm also very interested in who hit the whitelist. I'd like to see the xref in 6dos to see who these people are dealing with. I think RSK would be interested as well.
I've saved a copy of the 6dos hits against my whitelist at:
http://spamcheck.freeapp.net/6dos.domains.whitelist-hits
The entire whitelist, including many geographic domains is at:
http://spamcheck.freeapp.net/whitelist-domains.sort
Even if we have to clean up 1-2% of these listed, look how many evil domains we get. But I fully understand your philosophy on this Jeff. Some of these evil domains may not have spammed.....yet. ;)
I don't mind pre-emptively listing every domain of every known spam operation. What we don't want are FPs on legitimate domains.
Jeff C.
-
Chris Santerre -
Jeff Chan