--On Tuesday, December 2, 2008 12:23 -0800 Marc Perkel <[EMAIL PROTECTED]> wrote:


You query hostkarma.junkemailfilter.com

Not listed = new (new to us anyhow)
127.0.2.1 = last day
127.0.2.2 = last week
127.0.2.3 = older than a week

OK - so here's the rub. This catches 100% of all new domains. But - it
will have false positives because if an old domain has never emailed
anyone we filter for then it would also be considered new. We keep 40
days of data. So - this list might be useful as long as it was combined
with additional tests (probably spambot tests) as a score enhancer.


It's analogous to greylisting, to say that if we have not seen this
domain in the past N days, we tempfail, or score, or something.

However I think it would be better to have a software package that
implements this, rather than a remotely managed list, since each system
would have its own set of domains that it sees frequently (or that it
wants to whitelist permanently).

Joseph Brennan
Columbia University Information Technology




Reply via email to