[SURBL-Discuss] Draw the line (was: Need help checking FP list fromTheo)

[Rob McEwen]

Sm wrote:
>If a few legitimate customers are enough to get a domain off a blacklist, 
>then most of the domains currently listed will sooner or later get 
>off.  There will always be false positives because one man's spam is 
>another man's ham.  Someone should draw the line somewhere.

I definitely agree that this merits more discussion... and I see that there
has been more discussion.

...and forgive me for stating that obvious...

But, I would add that a huge consideration is the obfuscation techniques of
the spammer based on the sending server and the contents of the spam. For
example, if every other word is spliced with a fake html tag or if the spam
is being propagated by a virus, then (unless it's some kind of "joe jobs"
smear campaign), you can count on it being spam.

Rob McEwen