On Wednesday, September 15, 2004, 5:36:51 AM, Anti-Spam Anti-Spam wrote:
From: "Jeff Chan" jeffc@surbl.org
On Wednesday, September 15, 2004, 12:46:00 AM, Alex Broens wrote:
Jeff Chan wrote:
What is your expiration algorithm?
None so far. As its all very new, I'm still "collecting". On my local IP RBL I have 30 days, dunno yet what to use on URIs, I assume that using 6 months at least would be safe.
6 months sounds reasonable to me. 3 months could work also.
The way the sc data works is that it's refreshed by new reports or the records fall off the list after some number of days. In other words it's report-driven.
which makes sense when autromatically listing IPs as a zombie may be fixed real fast.
Not sure how that's relevant since we're doing URI domains, not zombie IPs. IOW we're doing destination URIs, not source IPs.
To me they're not too connected. The hosting of the URI and the sending of spam are relatively de-coupled (not connected).
my thought is that as domains are usually paid for a year or more, their owners have to get their ROI together, so keep them in there for at least as long as the dom is paid for...:)
Most hard core spammers use a domain for a couple days then abandon it. These spammers don't use their domains a year; they treat them as disposable.
Jeff C.
-
Jeff Chan