Kelson,
thank you for taking the time to try my list out. As it turns out, you
spotted an error in my code, something along the lines of "if (/$id{$_[5]}/)
{" instead of "if ($id{$_[5]}) {".
I've regenerated the list from my archived logs (which unfortunately only go
back to Jul 6) and improved the script to store the reverse-dns lookup in
the database.
do keep in mind that anyone who makes a mistake in mailing me (gets my
account name wrong) will show up on this list. Also people who subscribe to
a mailing list using an account at arix.com which doesn't exist will add the
mailing list to my RBL. These issues can be addressed on a case by case
basis and I will be available to keep the list clean.
To see the complete list you can now visit:
http://nospam.arix.com/list.php?dns=dict-fresh (or dns=dict-stale)
and for more information on other listings see:
http://nospam.arix.com/list.php?help
I do hope you'll give it another review! Also, would you please explain
what you meant by "and seeing ARIX_DF on the confirmation message"?
- erick
-----Original Message-----
From: Kelson Vibber [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 31, 2003 10:30 AM
To: Erick Calder; [EMAIL PROTECTED]
Subject: Re: [SAtalk] new DNS-based RBLs
"Erick Calder" <[EMAIL PROTECTED]> wrote:
>hei all, just wanted to announce I'm now publishing two dns-based lists of
>ip addresses that can be used for scoring. these lists comprise addresses
>of spammers doing dictionary attacks on my server.
>
>read about it at: http://nospam.arix.com/dns.php
I thought I'd try these out, but given the "shoot first, ask question
later" nature of the list, I used lower scores for testing.
Unfortunately I'm getting about a 20% FP rate with the "fresh" list. This
includes sources like the New York Times, the Motley Fool, Expedia, C-Net,
and end-users at SBC, Earthlink and Compuserve. The real kicker was
signing up for the new ClamAV announcement list at SourceForge and seeing
ARIX_DF on the confirmation message.
I may keep the lists on for a bit, but I'm not going to give either a score
higher than 1.0.
Kelson Vibber
SpeedGate Communications <www.speed.net>
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
