[SURBL-Discuss] Pleaae beta test ds.surbl.org - 6dos data

Chris Santerre csanterre at merchantsoverseas.com
Tue Jun 29 11:31:56 CEST 2004



>-----Original Message-----
>From: Jeff Chan [mailto:jeffc at surbl.org]
>Sent: Tuesday, June 29, 2004 10:23 AM
>To: Chris Santerre
>Cc: 'Jeff Chan'; 'SURBL Discussion list'
>Subject: Re: [SURBL-Discuss] Pleaae beta test ds.surbl.org - 6dos data
>
>
>On Tuesday, June 29, 2004, 7:12:38 AM, Chris Santerre wrote:
>
>>>From: Jeff Chan [mailto:jeffc at surbl.org]
>
>>>As a data point, 6dos hit 300 whitelist entries out of 120,000
>>>records, which is about a ten times greater whitelist hit *rate*
>>>than ob.surbl.org.
>>>
>
>> 0.25% fp rate, so it has an S/O rating of 99.75 :) 
>
>No, that's not an FP rate since my whitelist does not include
>every possible FP.  In fact, it's rather limited.  More like
>the 1000 most common web domains plus many more obscure
>geographic tlds that will probably never be used in spams.

LOL, you missed the joke there! ;) 

>
>The whitelist hits might give a hint at relative FP rates between
>lists, but only actual testing against real messages will give
>meaningful FP rates.


Believe me, I know!

>
>> Actually that is great info. Can we get the whitelist hits? 
>This might be a
>> great way to tweak the 6dos list. I'm also very interested 
>in who hit the
>> whitelist. I'd like to see the xref in 6dos to see who these 
>people are
>> dealing with. I think RSK would be interested as well.
>
>I've saved a copy of the 6dos hits against my whitelist at:
>
>  http://spamcheck.freeapp.net/6dos.domains.whitelist-hits
>

Sweeeeet!

>The entire whitelist, including many geographic domains is at:
>
>  http://spamcheck.freeapp.net/whitelist-domains.sort
>
>> Even if we have to clean up 1-2% of these listed, look how 
>many evil domains
>> we get. But I fully understand your philosophy on this Jeff. 
>Some of these
>> evil domains may not have spammed.....yet. ;)
>
>I don't mind pre-emptively listing every domain of every known
>spam operation.  What we don't want are FPs on legitimate domains.
>

10-4 good buddy. 

--Chris 


More information about the Discuss mailing list