[SURBL-Discuss] quick poll on SURBL hit %

Matt Egan (hotmail) mattegan_public at hotmail.com
Thu Jan 6 01:36:02 CET 2005


From: "Chris Santerre" <csanterre at MerchantsOverseas.com>
To: "SURBL Discussion List (E-mail)" <discuss at lists.surbl.org>;
"Spamassassin-Talk (E-mail)" <spamassassin-users at incubator.apache.org>
Sent: Wednesday, January 05, 2005 9:15 AM
Subject: [SURBL-Discuss] quick poll on SURBL hit %


> Just curious as to what average percent of spam people see SURBL hitting.
In
> a non scientific manor, I average about 85% or greater hitting SURBL for
all
> spam that doesn't get rejected by my MTA. I have a feeling if I clean up
my
> results a bit, that number would be even higher.
>
> Chris Santerre
[..]

This is for the last week or so of email (note about 4 days ago I changed
the rule name uribl_sbl to uribl_sblxbl (and the zone it pointed to)  so
those stats are a little off). Also note that for about 3 days I was having
massive timeouts trying to resolve names in the multi.surbl.org zone. I have
since setup a local copy of that zone.

Ranking of Tests in Blocked Spam: ( 1121 Blocked )
--------------------------------------------------  (top 30 of 715 rules
triggered)
          % 76.8         861 : HTML_MESSAGE
          % 52.3         586 : MIME_HTML_ONLY
          % 41.7         467 : URIBL_SBL
          % 25.2         282 : URIBL_WS_SURBL
          % 23.0         258 : MPART_ALT_DIFF
          % 21.4         240 : URIBL_OB_SURBL
          % 17.8         199 : RATWARE_ZERO_TZ
          % 17.7         198 : HTML_90_100
          % 17.6         197 : URIBL_JP_SURBL
          % 16.8         188 : DRUGS_ERECTILE
          % 16.1         180 : MIME_BASE64_TEXT
          % 16.1         180 : SARE_MULT_RATW_02
          % 14.8         166 : MSGID_FROM_MTA_ID
          % 14.0         157 : MIME_BOUND_DD_DIGITS
          % 13.2         148 : MIME_HTML_ONLY_MULTI
          % 12.8         143 : AWL
          % 12.3         138 : HTML_40_50
          % 12.0         135 : BIZ_TLD
          % 12.0         134 : URIBL_SC_SURBL
          % 11.6         130 : HTML_30_40
          % 10.8         121 : HTML_FONT_BIG
          % 10.2         114 : DRUGS_ERECTILE_OBFU
          % 10.2         114 : X_MESSAGE_INFO
          % 10.1         113 : DRUGS_PAIN
          % 9.8  110 : LONGWORDS
          % 9.3  104 : BAYES_99
          % 9.2  103 : RCVD_BY_IP
          % 8.8  99 : HTML_TEXT_AFTER_BODY
          % 8.7  98 : MIME_QP_LONG_LINE
          % 8.4  94 : HTML_IMAGE_RATIO_02


Ranking of Tests in Tagged Spam: ( 297 Tagged )
-----------------------------------------------  (top 30 of 322 rules
triggered)
          % 65.3         194 : HTML_MESSAGE
          % 37.0         110 : MIME_HTML_ONLY
          % 36.7         109 : URIBL_SBL
          % 25.6         76 : AWL
          % 25.3         75 : HTML_90_100
          % 15.5         46 : HTML_TEXT_AFTER_BODY
          % 15.2         45 : HTML_IMAGE_RATIO_02
          % 13.8         41 : HTML_TEXT_AFTER_HTML
          % 12.5         37 : MSGID_FROM_MTA_ID
          % 11.8         35 : HTML_FONT_BIG
          % 9.8  29 : HTML_80_90
          % 8.8  26 : TO_ADDRESS_EQ_REAL
          % 7.7  23 : MIME_QP_LONG_LINE
          % 7.4  22 : BAYES_50
          % 7.4  22 : MPART_ALT_DIFF
          % 7.1  21 : URIBL_WS_SURBL
          % 6.4  19 : HTML_TAG_EXIST_TBODY
          % 6.1  18 : HTML_IMAGE_ONLY_16
          % 5.1  15 : HTML_IMAGE_ONLY_20
          % 5.1  15 : FORGED_RCVD_HELO
          % 4.7  14 : NO_REAL_NAME
          % 4.4  13 : HTML_IMAGE_ONLY_12
          % 4.4  13 : SARE_HTML_HTML_AFTER
          % 4.4  13 : HELO_DYNAMIC_IPADDR2
          % 4.0  12 : MIME_HTML_MOSTLY
          % 4.0  12 : RCVD_NUMERIC_HELO
          % 3.7  11 : DOMAIN_RATIO
          % 3.7  11 : DATE_IN_FUTURE_12_24
          % 3.4  10 : HTML_MIME_NO_HTML_TAG
          % 3.4  10 : MIME_BASE64_TEXT


-Matt


More information about the Discuss mailing list