On Fri, 18 Dec 2009, Justin Mason wrote:
Or we could have the whitelist rules in a meta such that they only
hit when a blacklist rule doesn't, if this is a common enough
problem. It might also allow people to get past the high negative
score for the whitelists.
it can be measured by finding the WL rule's page on
ruleqa.spamassassin.org, then examining the OVERLAP section for overlaps
with BL rules.
As of last weekend's network masscheck:
T_RCVD_IN_RP_CERTIFIED
SPAM% 0.0851 126 of 148025 messages
HAM% 0.3738 746 of 199558 messages
S/O 0.63
RANK 0.185
overlap spam: 60% of T_RCVD_IN_RP_CERTIFIED hits also hit __RCVD_IN_BRBL;
overlap spam: 58% of T_RCVD_IN_RP_CERTIFIED hits also hit __RCVD_IN_ZEN;
overlap spam: 26% of T_RCVD_IN_RP_CERTIFIED hits also hit __RCVD_IN_SORBS;
T_RCVD_IN_RP_CERTIFIED
SPAM% 0.0851 126 of 148025 messages
HAM% 0.3738 746 of 199558 messages
S/O 0.185
RANK 0.63
overlap spam: 60% of T_RCVD_IN_RP_SAFE hits also hit __RCVD_IN_BRBL;
overlap spam: 58% of T_RCVD_IN_RP_SAFE hits also hit __RCVD_IN_ZEN;
overlap spam: 26% of T_RCVD_IN_RP_SAFE hits also hit __RCVD_IN_SORBS;
Test rules committed.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
"Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
does quite what I want. I wish Christopher Robin was here."
-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
7 days until Christmas
