[SURBL-Discuss] XS hits

[Paul Shields]

Below are some stats from our incoming mail since midnight 23/04/05. I'm not 
going to go into too deep an analysis as it's the weekend and I'm too 
'tired' to do that ;).

Total nbr of messages with at least one ??_SURBL hit over the last 22 hours 
was around 1.4 million. The counts below show how many triggered as 'spam' 
("result: Y"), and how many didn't trigger ("result: \."). This is based on 
our Spam Assassin default threshold of 8, but we have many custom rules so 
spam threshold is really only meaningful to our config - YMMV ;). We don't 
currently block or tag via SURBL/RBL at the MTA layer - everything goes 
through SA.

XS popped up reasonably frequently in all SURBL hits - and we had 10456 XS 
spam hits where it wasn't listed in any other URIBL (unable to say how many 
false-positives out of that list, but our default tagging threshold is high 
in SA and FP's are vanishingly small).

Anyway - make of it as you will. SURBL rocks anyway - XS *may* be a useful 
addition.


Cheers

Paul

-- 


---

List of all messages (spam and non-spam) that included a SURBL hit:
report01:/tmp# wc surbl-2005-04-23.log
1447355

SURBL XS Non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep XS_SURBL|grep -c "result: \."
6283

SURBL XS Spam (including messages that had other SURBL hits)
report01:/tmp# cat surbl-2005-04-23.log|grep XS_SURBL|grep  -c "result: Y"
939134

---

Nbr of XS spam hits that weren't in any other SURBL lists:

report01:/tmp# cat surbl-2005-04-23.log| egrep -v 
"URIBL_AB_SURBL|URIBL_OB_SURBL|URIBL_PH_SURBL|URIBL_SC_SURBL|URIBL_WS_SURBL|URIBL_JP_SURBL" 
|grep -c "result: Y"

10456

-- 

Nbr of non-spam XS hits (not in any other SURBL lists):

report01:/tmp# cat surbl-2005-04-23.log|egrep -v 
"URIBL_AB_SURBL|URIBL_OB_SURBL|URIBL_PH_SURBL|URIBL_SC_SURBL|URIBL_WS_SURBL|URIBL_JP_SURBL" 
|grep -c "result: \."

5300

--- 
AB non spam
report01:/tmp# cat surbl-2005-04-23.log|grep AB_SURBL|grep  -c "result: \."
604

AB spam
report01:/tmp# cat surbl-2005-04-23.log|grep AB_SURBL|grep  -c "result: Y"
521886

---

WS non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep WS_SURBL|grep  -c "result: \."
12578

WS spam
report01:/tmp# cat surbl-2005-04-23.log|grep WS_SURBL|grep  -c "result: Y"
996200

---

JP non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep JP_SURBL|grep  -c "result: \."
4376

JP spam
report01:/tmp# cat surbl-2005-04-23.log|grep JP_SURBL|grep  -c "result: Y"
1234602

---

OB non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep OB_SURBL|grep  -c "result: \."
36760

OB spam
report01:/tmp# cat surbl-2005-04-23.log|grep OB_SURBL|grep  -c "result: Y"
1139181

---

SC non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep SC_SURBL|grep  -c "result: \."
1095

SC spam
report01:/tmp# cat surbl-2005-04-23.log|grep SC_SURBL|grep  -c "result: Y"
751549

---
PH non-spam
report01:/tmp# cat surbl-2005-04-23.log|grep PH_SURBL|grep  -c "result: \."
1

PH spam
report01:/tmp# cat surbl-2005-04-23.log|grep PH_SURBL|grep  -c "result: Y"
383