Results you can expect with my IP reputation system

2011-04-11 Thread darxus
Without contributing any data: RCVD_IN_IPREP_100 hits 29.104% ham, 0.396% spam. S/O = 0.013. RCVD_IN_IPREP_0 hits 0.461% ham, 7.470% spam. S/O = 0.942. It looks like there are plenty of rules in active use by spamassassin which do worse. After uploading a list of which IPs from 100 emails se

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
be an issue. It will also make your data practically worthless. [...] > > That's why I think it's folly to accept IP reputation submissions > > from people with whom you have no trust relationship. They could > > be feeding you utter garbage and you'd never know. >

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
On Thu, 28 Oct 2010 13:56:08 -0230 "Lawrence @ Rogers" wrote: > What reporting system do you use? Although our Perl client library is free, the server-side code is proprietary. > and how does one avail of the data it provides? We sell rsync access to our lists. We also provide it for free to

Re: Collecting IP reputation data from many people

2010-10-28 Thread Darxus
register "millions" of accounts? Free. Unrestricted. > We have some users who report to us whom we do not charge. These are > MIMEDefang users that we know and trust, and who use our Perl client > library to report back. Right, so you're doing something quite different.

Re: Collecting IP reputation data from many people

2010-10-28 Thread Lawrence @ Rogers
On 28/10/2010 1:45 PM, David F. Skoll wrote: OK, On a somewhat less sarcastic note: One reason we didn't use TCP is that it simply doesn't scale. If you have clients that open a TCP connection, do a report, and then close the TCP connection, there's a huge bandwidth penalty. On the other hand

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
OK, On a somewhat less sarcastic note: One reason we didn't use TCP is that it simply doesn't scale. If you have clients that open a TCP connection, do a report, and then close the TCP connection, there's a huge bandwidth penalty. On the other hand, if your clients maintain persistent TCP conne

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
at exactly is a "reputation" system anyway? When you want to find out the reputation of something, you ask people you know and trust. You don't stop random people in the street and ask them. That's why I think it's folly to accept IP reputation submissions from people with

Re: Collecting IP reputation data from many people

2010-10-28 Thread Darxus
On 10/28, Dave O'Neill wrote: > >>http://www.mimedefang.org/reputation > You're discounting it entirely because it uses UDP? Are you sure > you read the RFC? > > The sender IP address is irrelevant -- it's not used for anything at > all. Reports are authenticated with a prearranged username and

Re: Collecting IP reputation data from many people

2010-10-28 Thread Dave O'Neill
On Fri, Oct 22, 2010 at 02:32:17PM -0400, dar...@chaosreigns.com wrote: On 10/22, Henrik K wrote: You should check out this draft: http://www.mimedefang.org/reputation (An IETF draft of a Reputation Reporting Protocol.) Yup, thank you. It's interesting that the ASRG list didn't mention this.

Re: Collecting IP reputation data from many people

2010-10-25 Thread Benny Pedersen
On man 25 okt 2010 21:24:38 CEST, Dennis German wrote Have you pulled your own data from auto-whitelist ? or use spamcop worst spam ipranges ? awl is usefull if one change the default mask to /32 else the ip counts will be to fussy to make anything there -- xpoint http://www.unicom.com/pw/re

Re: Collecting IP reputation data from many people

2010-10-25 Thread Dennis German
On Oct 23, 2010, at 12:31 PM, Royce Williams wrote: > On Sat, Oct 23, 2010 at 7:31 AM, Per Jessen wrote: >> Royce Williams wrote: >> >>> On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell >>> wrote: On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: > > I'd like to try collecting

Re: Collecting IP reputation data from many people

2010-10-23 Thread Royce Williams
On Sat, Oct 23, 2010 at 7:31 AM, Per Jessen wrote: > Royce Williams wrote: > >> On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell >> wrote: >>> On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: I'd like to try collecting reputation data for every IP address from everyone willing

Re: Collecting IP reputation data from many people

2010-10-23 Thread Per Jessen
Royce Williams wrote: > On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell > wrote: >> On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: >>> >>> I'd like to try collecting reputation data for every IP address from >>> everyone willing to submit it. > >> re-inventing the wheel. > > If what's be

Re: Collecting IP reputation data from many people

2010-10-22 Thread Darxus
On 10/22, m...@khonji.org wrote: > www.ceas.cc/2006/19.pdf On 10/22, Claude Frantz wrote: > considered as importunate by another recipient. Therefore, an > universally valid SPAM ranking is not possible. Further, a SPAM ranking The high rankings in spamassassin rule QA of existing blacklist a

Re: Collecting IP reputation data from many people

2010-10-22 Thread Royce Williams
On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell wrote: > On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: >> >> I'd like to try collecting reputation data for every IP address from >> everyone willing to submit it. > re-inventing the wheel. If what's being suggested is a non-commercial alte

Re: Collecting IP reputation data from many people

2010-10-22 Thread Michael Scheidell
On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: I'd like to try collecting reputation data for every IP address from everyone willing to submit it. Via something like spamassassin's --report (spam) and --revoke (non-spam) functions. And then providing a list with a percentage of non-spam (vs

Re: Collecting IP reputation data from many people

2010-10-22 Thread Henrik K
On Thu, Oct 21, 2010 at 08:50:43PM -0400, dar...@chaosreigns.com wrote: > I'd like to try collecting reputation data for every IP address from > everyone willing to submit it. You should check out this draft: http://www.mimedefang.org/reputation

Re: Collecting IP reputation data from many people

2010-10-22 Thread Matus UHLAR - fantomas
On 21.10.10 20:50, dar...@chaosreigns.com wrote: > I'd like to try collecting reputation data for every IP address from > everyone willing to submit it. Via something like spamassassin's --report > (spam) and --revoke (non-spam) functions. And then providing a list with > a percentage of non-spam

Re: Collecting IP reputation data from many people

2010-10-21 Thread Claude Frantz
On 10/22/2010 02:50 AM, dar...@chaosreigns.com wrote: Or falsely reporting legit mail servers as sending large quantities of spam in another attempt to cripple the usefulness of such a system. I'm also interested in more ideas on how spammers could game this system, and what could be done about

Re: Collecting IP reputation data from many people

2010-10-21 Thread m
www.ceas.cc/2006/19.pdf --- Mahmoud Khonji -Original Message- From: m...@khonji.org Date: Fri, 22 Oct 2010 01:03:54 To: ; Reply-To: m...@khonji.org Subject: Re: Collecting IP reputation data from many people >I was originally thinking it would be >most informative to provi

Re: Collecting IP reputation data from many people

2010-10-21 Thread m
>I was originally thinking it would be >most informative to provide the >number of spams and non-spams from >each IP over some time period. Google has a presentation in CEAS (check ceas.cc website) that explained a very similar approach to fight SPAM by ranking mail senders. As the presentation

Collecting IP reputation data from many people

2010-10-21 Thread Darxus
I'd like to try collecting reputation data for every IP address from everyone willing to submit it. Via something like spamassassin's --report (spam) and --revoke (non-spam) functions. And then providing a list with a percentage of non-spam (vs. spam) seen from every IP. And hopefully that would

IP reputation data collection protocol

2010-04-30 Thread Dave O'Neill
We at Roaring Penguin Software have built a system to collect IP reputation information. We'd like to collaborate on an open standard, lightweight protocol for reporting and collecting this information. Our current implementation has been in active use for a while now, so we feel i

Re: IP reputation DB vendors

2010-04-27 Thread João Gouveia
Hi Jernej, - "Jernej Porenta" wrote: > Heya, > > I am searching for commercial IP reputation DB access which I could > use with SpamAssassin. > > I know that there is DCC with IP reputation, but there aren't many > others that I could use with SA

IP reputation DB vendors

2010-04-26 Thread Jernej Porenta
Heya, I am searching for commercial IP reputation DB access which I could use with SpamAssassin. I know that there is DCC with IP reputation, but there aren't many others that I could use with SA (or frontend postfix server). I also found out MailSpike (http://mailspike.org), but I be

Re: [SPAM]IP Reputation

2009-01-22 Thread Michael Scheidell
postfix, spamassassin and amavisd ;-) SA comes with several ip reputation tests, plugins and scores. Barracuda has one, with special spamassassin support (will be in SA 3.3, for 3.2x you have to manually add it) If you are looking for more than what SA already has, look into the commercial

IP Reputation

2009-01-22 Thread Luis Croker
Hi all... I would like to install an antispam server using postfix +spamassassin+amavis. Is there something that I can install to verify the reputation IP ? Any additional software ? thanks a lot.