[SAtalk] RE: [AMaViS-user] Amavisd-new and logging untrusted relays...

2003-10-27 Thread Stewart, John
> Median sounds like a better idea than average, for sure. > Perhaps to be conservative both will have to be over a > certain threshold. Actually, perhaps it would be best to only turn off SMTP from servers from which *no* legitimate mail was delivered (in the last X amount of time). This is e

[SAtalk] RE: [AMaViS-user] Amavisd-new and logging untrusted relays...

2003-10-27 Thread Stewart, John
> | - The "action" routine would run through the hashes and > compute the average > | spam levels for each IP, ... > |... > | I guess I need to sort out what a good criteria would be > for action. Would > | average spam level be an adequate way to determine a "bad" IP? ... > > Don't use 'average

[SAtalk] Re: [AMaViS-user] Amavisd-new and logging untrusted relays...

2003-10-25 Thread Mark Martinec
John, | - The "action" routine would run through the hashes and compute the average | spam levels for each IP, ... |... | I guess I need to sort out what a good criteria would be for action. Would | average spam level be an adequate way to determine a "bad" IP? ... Don't use 'average' on datasets