At 03:24 PM 7/8/2003, Simon Byrnand wrote:
where do you get the idea that DCC "deliberately includes legitimate newsletters"

From the man page:


http://www.rhyolite.com/anti-spam/dcc/dcc-tree/dcc.html
The Distributed Checksum Clearinghouse or DCC is a cooperative, dis-
tributed system intended to detect "bulk" mail or mail sent to many peo-
ple.  It allows individuals receiving a single mail message to determine
that many other people have received essentially identical copies of the
message and so reject or discard the message.  It can identify some unso-
licited bulk mail using "spam traps" and other detectors, but that is not
its focus.

So maybe I shouldn't have said that it deliberately includes newsletters, but its purpose is to identify bulk email, and that does include newsletters.


I've seen newsletters listed in RAZOR2 quite often, although they sometimes later
get revoked.

Yes, but the stated purpose of Razor is to identify spam, not to identify all bulk mail. A newsletter showing up in Razor is an error (fixed by revoking). A newsletter showing up in DCC is annoying, but still within its mission.


I don't see how the
DCC/RAZOR2/PYZOR databases can (or should) try to analyze the message
content to see if its spam or not

Sorry, my phrasing was off. I meant to draw a distinction between Razor and Pyzor identifying spam, and DCC identifying bulk mail.


All together is probably most effective of course, so long as the false positives of all three dont
accumulate enough to register as spam.

That's the approach I take (although with only Razor and Pyzor), and it works well here. Sure, by adding another check you're increasing the chances that *one* of them will be a false positive, but it's much less likely that a false positive will show up in *both*.


I've thought about trying out DCC with a really low score just to see the hit/FP rate, but I've never gotten around to it. Since it sounds like people are mainly using it for spam after all, I'll probably look into it again.

Kelson Vibber
SpeedGate Communications <www.speed.net>



-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to