Per Jessen wrote:
Marc Perkel wrote:
I think I'm the highest volume source for Dirk. If not the highest I'm
up there. I'm feeding his public servers. i have been for about a
year.
Hi Marc,
a feed that size is very interesting to be perfectly honest. I have a
couple of questions -
how do you determine what to feed? spamtraps, honeypots?
if so, how are these set?
are you feeding Dirk only the hashes or are you feeding him the raw
email? i.e. who is computing the fuzzy hash?
/Per Jessen, Zürich
I do most of the filtering using Exim rules and I only use Spamassassin
on less that 1% of incoming email. What I do is focus on the behavior of
the spammer rather than the content of the message. I have too many
tricks to describe here but my filtering is extremely accurate.
I'm sending Dirk only hashes. We set up a special server to process them
at high speeds. I'm probably sending about 100k hashes a day.
