You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2006/10/12 14:29:26 UTC

[Bug 4200] Suggestion: Domain Age as a criteria

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4200





------- Additional Comments From jm@jmason.org  2006-10-12 05:29 -------
Dallas, any chance you can make that domain live?  it might be worth
playing around with. ;)


regarding the DOB stuff, I've had those rules checked into my sandbox. here's
what they scored last weekend:

0.00000 	1.3603  3559 of 261633 messages  	0.0429  27 of 62951 messages  
0.969 	0.79 	0.00 	T_URIBL_RHS_DOB
 	 	
0.00000 	0.0684 179 of 261633 messages 	0.0000 0 messages 	1.000 	0.54 	0.00 
T_RCVD_IN_DOB
 	
0.00000 	0.0684 179 of 261633 messages 	0.0000 0 messages 	1.000 	0.54 	0.00 
T_DNS_FROM_DOB

interestingly, there's 100% overlap between T_RCVD_IN_DOB and T_DNS_FROM_DOB.  a
good quantity of the spam it hits is below 5 points:

  scoremap spam:  0   8.38%   15 ***
  scoremap spam:  1  10.61%   19 ****
  scoremap spam:  2   8.94%   16 ***
  scoremap spam:  3  10.61%   19 ****
  scoremap spam:  4   4.47%    8 *
  scoremap spam:  5   8.38%   15 ***

Still, those are very low hit-rates, given the overhead of the DNSBL lookups
required :(

more at:
http://ruleqa.spamassassin.org/20061007-r453869-n/T_RCVD_IN_DOB/detail?s_defcorpus=on&s_zero=on&srcpath=sandbox%2Fjm


something iffy with the logic of that test btw.  one mail it FP'd on had a
listing of this domain:

domain:         THEORETIC.COM
owner-name:     Theoretic Internet Services
owner-address:  3101 Elwood Trail
owner-address:  32309
owner-address:  Tallahassee
owner-address:  Florida
owner-address:  United States of America
admin-c:        AT120-GANDI
tech-c:         AT120-GANDI
bill-c:         AT120-GANDI
nserver:        a.highspeedrails.com 66.249.27.62
nserver:        b.highspeedrails.com 205.234.216.227
reg_created:    1998-09-29 00:00:00
expires:        2009-09-28 04:00:00
created:        2000-12-18 15:29:22
changed:        2006-10-05 00:26:44

the mail was from 2006-07-07...




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.