> Median sounds like a better idea than average, for sure.
> Perhaps to be conservative both will have to be over a
> certain threshold.
Actually, perhaps it would be best to only turn off SMTP from servers from
which *no* legitimate mail was delivered (in the last X amount of time).
This is e
> | - The "action" routine would run through the hashes and
> compute the average
> | spam levels for each IP, ...
> |...
> | I guess I need to sort out what a good criteria would be
> for action. Would
> | average spam level be an adequate way to determine a "bad" IP? ...
>
> Don't use 'average
John,
| - The "action" routine would run through the hashes and compute the average
| spam levels for each IP, ...
|...
| I guess I need to sort out what a good criteria would be for action. Would
| average spam level be an adequate way to determine a "bad" IP? ...
Don't use 'average' on datasets
