hei all, just wanted to announce I'm now publishing two dns-based lists of ip addresses that can be used for scoring. these lists comprise addresses of spammers doing dictionary attacks on my server.
read about it at: http://nospam.arix.com/dns.php
I thought I'd try these out, but given the "shoot first, ask question later" nature of the list, I used lower scores for testing.
Unfortunately I'm getting about a 20% FP rate with the "fresh" list. This includes sources like the New York Times, the Motley Fool, Expedia, C-Net, and end-users at SBC, Earthlink and Compuserve. The real kicker was signing up for the new ClamAV announcement list at SourceForge and seeing ARIX_DF on the confirmation message.
I may keep the lists on for a bit, but I'm not going to give either a score higher than 1.0.
Kelson Vibber
SpeedGate Communications <www.speed.net>
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
