On 28-Apr-2009, at 08:56, Matus UHLAR - fantomas wrote:
We have more servers users send mail through. Users can't choose which
server will they connect.
That already happens now.
It can also happen when user switched ISP, mail provider, or the mail
provider changes IP address, DNS names or what is used there.
This would require much more logic that is curerntly in AWL.
No it wouldn't. The AWL has a confidence based on number of messages
received, right? If I get messages from b...@example.com that come from
a variety of servers, the confidence is much lower than if they all
come from the same server, so the adjustment is lower.
This would even be useful if the original AWL entry is spammish since
multiple servers might be a sign of a botnet or host hopping, so
applying a little spammish nudge to these messages is probably
going to
help out a lot, especially if spam...@fakedoamin.tld is sending mails
from, say, 10 different server then all those AWL mismatches are
going to
feed each other into moving that AWL up very very fast.
The question is if users tend to repeatedly get spam from the same
sender
through the same servers.
No, if they get spam from the SAME senders on DIFFERENT servers, the
AWL would go up even faster.
On 28-Apr-2009, at 09:07, Jeff Mincy wrote:
Your idea will FP anytime anybody adds a new email device or the ISP
changes (etc).
That's why the adjustment would be, initially, small.
f...@example.com sends me lots of mail. Say it's over 100. It's all
ham and it all comes from mail.example.com. The AWL for this email
couplet is , say -2.1. An email comes in from f...@example.com but
sent from spam.spammer.tld and score 7.0. It gets an additional,
say, .42 (20% of the AWL) to score 7.42 instead. Now, another mail
from f...@example.com comes in from mail.spam2.tld, this one scores
4.3. It gets a +.42 for missing the match on mail.example com, and
gets a +.288 for missing the match on spam.spammer.tld (1% of the AWL,
double for being positive, doubled again for being over 5), for a
total score of 4.3+.288+.42 = 5.08, pushing it over the spam threshold.
Now, say example.com adds a second mail server, mail2.example.com. It
will start off with a 'penalty' of +0.708 for being an unknown
sender. But, if the message scores under 0, we don't adjust the AWL
at all. If the message is over 0, yes it will have an initial penalty
but the AWL is pretty darn good at adjusting.
Now, say another AWL entry is based on only 20 emails, instead of
adjusting by 20% of the awl, we adjust only 4%. (or something. the
point is, the more emails the AWL is based on, the more confident it
is, and that confidence should count AGAINST messages that don't match
the AWL).
--
When we woke up that morning we had no way of knowing that in a
matter of hours we'd changed the way we were going. Where would
I be now? Where would I be now if we'd never met? Would I be
singing this song to someone else instead?
