John, | - The "action" routine would run through the hashes and compute the average | spam levels for each IP, ... |... | I guess I need to sort out what a good criteria would be for action. Would | average spam level be an adequate way to determine a "bad" IP? ...
Don't use 'average' on datasets that are not uniform or gaussian in their nature, but can easily be skewed (e.g. a single whitelisted score of -100 will bump the average way out). Much better measure is the median value (the middle element in the sorted list, you don't need to actually sort it to get it). Mark ------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
