For all interested.. I'm *NOT* looking to give this type of rule 5 points.
I want to give it something like .3 - .6 (but will play with it), as noted by many, this isn't an indication of spam, but an indicator of a possible spam-source. I believe that people who don't own their own IP ranges, can be more likely to be spam-sources, whether by misconfiguration, trojanned by some worm, or just some spammer that changed ISPs every month because he gets shut down (I could only hope), and reverse-lookup similarities seem to be a *good* indicator of a "non-owned IP". I see everyone's concerns, and they are duly noted. Yes, real businesses have IPs in dynamic/DSL ranges for real reasons. I totally agree with that. (I'm a DSL customer at home and and have a "similar reverse lookup" and have a mail server there.) I don't want to ban these mails, but want to add to the total score. If this puts someone over the top, so be it. But, their mail already looked close to spam to begin with. Nuff said. Thanks for all the input. Steven -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Pineau Sent: Friday, October 31, 2003 8:36 AM To: sa Subject: RE: [SAtalk] Rule for reverse lookup similarities > > This is a *very* common naming convention for ISPs that > > assign dynamic > > IPs. You'll get a *lot* of false positives if you score based on that. > > > Be very careful. This isn't just dynamic IP's. When I install business DSL for my customers, the PTR record is always like that whether it's fixed or dynamic and doesn't change unless the customer specifically requests the RR (which they frequently don't). -- Frank Pineau This is my sig. There are many like it, but this one is mine. ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
