Re: [SURBL-Discuss] MIT Spam conference

2004-12-18 Thread Ryan Thompson
l, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org -- ___ Discuss mailing list [EMAIL PROTECTED] http://lists.surbl.org/mailman/listinf

Re: A simple way to...

2004-10-09 Thread Ryan Thompson
use this at the MTA level, I could envision you wanting to grab, say, every entry over a certain average score and potentially greylist based on that or something. Hope this helps, - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North

Re: scan times up!

2004-10-01 Thread Ryan Thompson
between 2.6x and 3.0 before upgrading, which included performance benchmarks, and, for certain configurations, I found 3.0 to be marginally faster than 2.6x. In all cases *with equivalent configurations*, performance was about the same. - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Techno

Announce: GetURI 1.6 Released

2004-10-01 Thread Ryan Thompson
will help improve GetURI! Additional testers are always welcome. - Ryan Thompson <[EMAIL PROTECTED]> -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037

Re: MIMEDefang, SpamAssassin and URIDNSBLs

2004-09-26 Thread Ryan Thompson
the SA check in filter_end(). - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America

Re: stripping SA headers for reporting? (spamcop, etc.)

2004-09-18 Thread Ryan Thompson
stripped out automatically before submission. This does the same thing as -d before submission. If it doesn't do what you want, then your upstream probably isn't adding SA markup. (i.e., they're wrapping it themselves using MIMEDefang or something). - Ryan -- Ryan Thomp

Re: URI obfuscation check

2004-09-17 Thread Ryan Thompson
ntext renderers will, however, link anything that looks like a URI. - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon Toll-Free: 877-727-5669 (

Re: Start an IP list to block?

2004-09-09 Thread Ryan Thompson
e effectively DoSsed by the sheer number of subdomains in use. There are a few ways I could think to greatly optimize that, but, so far, I don't see a big win. - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon

Re: Start an IP list to block?

2004-09-09 Thread Ryan Thompson
Jeff Chan wrote to Ryan Thompson: On Thursday, September 9, 2004, 2:34:00 PM, Ryan Thompson wrote: "Can't" is a curse word to a scientist. "Can't *yet*", on the other hand, is usually a good motivator! - Ryan A good scientist has at least a working understandin

Re: [SURBL-Discuss] Start an IP list to block?

2004-09-09 Thread Ryan Thompson
else you would block. We *can*, Jeff. We can. That was the whole point of my message. - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America

Re: Start an IP list to block?

2004-09-09 Thread Ryan Thompson
ot;Can't" is a curse word to a scientist. "Can't *yet*", on the other hand, is usually a good motivator! - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3

Re: [SURBL-Discuss] Start an IP list to block?

2004-09-09 Thread Ryan Thompson
ere would be many many other statistical benefits we could gain. - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America

Re: [SURBL-Discuss] Ham corpora needed

2004-09-05 Thread Ryan Thompson
ssassin from CPAN just to gain that functionality. You don't even have to *use* SA. :-) - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies - http://www.sasknow.com 901-1st Avenue North - Saskatoon, SK - S7K 1Y4 Tel: 306-664-3600 Fax: 306-244-7037 Saskat

Re: [SURBL-Discuss] Setting SpamAssassin scores for SURBL lists

2004-09-05 Thread Ryan Thompson
.00 60.087 81.2111 0.1.000 0.000.00 WS_SURBL Is that more like what you had in mind..? No, I'm not making that up. :-) Anyone with ham corpora, just search for WS_SURBL hits and give 'em a hand-check. - Ryan -- Ryan Thompson <[EMAIL PROTECTED]> SaskNow Technologies -

Re: shifting the midpoint between the average spam and average ham scores back to 5.0

2004-09-03 Thread Ryan Thompson
is with a spam corpus, if you want to balance FPs against FNs (if you're well below your maximum FP ratio, you have some room to play). We get a lot less than 1/2000 FPs (usually 0), but 1/2000 is the maximum ratio we'd allow before increasing the threshold. - Ryan -- Ryan Tho