---- Original Message -----
From: "Matt Kettler" <[EMAIL PROTECTED]>
This makes me wonder if SA wouldn't be better off having some kind of meta
rules
that simply count how many URIBLs the message is listed in, or at least
some
kind of score-limiting feedback on multiple hits. This would allow lists
to
score high individually, but prevent overlapping FPs from being driven
into
astronomical score levels just for containing a single URI that someone
mis-reported to multiple sources.
Thoughts, concepts?
So, Matt, why is this any different than an IP addresses that gets listed in
many different RBLs and reported by SA? The more the merrier, I say. When
spam is detected by many different external sources and internal tests, this
lends credibility to the spam designation, in my view. Otherwise, you could
make the same meta rule distinction and apply it to RBLs & RHSBLs, as well -
and possibly Pyzor & Razor hits, too.
Just my two cents...
Bill
