LuKreme wrote: > On 12-May-2009, at 10:11, Adam Katz wrote: >> I'd go a step farther ... mail sent outside of the work day >> (local *and* EST) is more commonly spam. > > If you mailserver is only used for a normal work-day company and > normal workday emails, this is possibly true.
I should have said "in the wee hours" instead of "outside the work day;" I didn't mean to alienate non-workplace environments. > On my mailserver there is a slight drop-off in legitimate mail on > the weekends because most of the mailing lists slow down on the > weekends, but since I have users with personal email accounts, > their ham actually tends to increase over the weekends. Right, the weekend rule is only good for some workplaces. I have little interest in it. However, any of my users who have opted out of greylisting are actually only opted out during business hours. > On my own mail, some of the mailing lists I am on are based in > Europe, so their prime messages distribution (mornings in Germany) > would fall into your KHOP_LATENIGHT range. This is not applicable on two counts. I said "local *and* EST" which means in Germany, which is +0100, the window would be the union of 12a-6a EST and 1a-5a CEST, which is 19-1 UTC and 0-4 UTC, which is 0-1 UTC -- Just one hour for Central Europe, and NEVER for Eastern Europe and eastwards through Hawaii. This rule is primarily for North America ... maybe we can adjust the window a bit for Europe, say EST 10p-7a plus local 1a-5a, but that would only widen the CEST window to two hours. Also note that any bulk or list message bypasses the filter, as it's common for those to be sent late at night. > OTOH, a 0.25 is unlikely to change a ham to spam. It's only 0.25 becaise it's still a young experiment.