You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@issues.apache.org on 2010/12/29 13:33:36 UTC
[Bug 6529] New: Evaluate NiX Spam DNSBL
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6529
Summary: Evaluate NiX Spam DNSBL
Product: Spamassassin
Version: 3.3.1
Platform: PC
OS/Version: Windows 7
Status: NEW
Severity: normal
Priority: P2
Component: Rules
AssignedTo: dev@spamassassin.apache.org
ReportedBy: wtogami@gmail.com
20_khop_bl.cf since late 2009 contained the rule RCVD_IN_NIX_SPAM
http://blog.malowa.de/2010/12/nix-spam-is-fairly-good-dnsbl.html
According to this blog post, NIX_SPAM lists IP's for only 12 hours. I have
confirmed in my own local masschecks that NIX_SPAM is very good only for spam
received during that window, and otherwise testing older spam is a big waste of
time and resources as it will not tell you anything useful.
Perhaps we should treat this a bit differently from evaluating other DNSBL's in
the weekly masscheck because it is useless to test the vast majority of spam.
Proposal
========
1) Add "reuse" to its tflags, which would exclude it from normal querying
during the masscheck if masscheck clients had used --reuse. Excluded testing
and resulting false negatives is *OK* because results older than 12 hours would
be unreliable anyway.
2) All sources of mail heading into the corpus from now on should do tagging
with spamassassin using these rules in local.cf:
header RCVD_IN_NIX_SPAM
eval:check_rbl('nix-spam-lastexternal','ix.dnsbl.manitu.net.')
describe RCVD_IN_NIX_SPAM Received via a relay in NiX Spam (heise.de)
score RCVD_IN_NIX_SPAM 0.01
3) Perceived performance in RuleQA will appear to be very poor because of all
the majority of mail from pre-tagging. But we can instead look at the most
recent week performance to see how this rule is doing.
Thoughts?
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6529] Evaluate NiX Spam DNSBL
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6529
Adam Katz <an...@khopis.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |antispam@khopis.com
--- Comment #1 from Adam Katz <an...@khopis.com> 2010-12-29 20:35:13 UTC ---
Reminder: This DNSBL does better w.r.t. mail to and/or from Germany and its
neighbors and won't be as effective with corpora based in other continents.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6529] Evaluate NiX Spam DNSBL
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6529
Warren Togami <wt...@gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Version|3.3.1 |SVN Trunk (Latest Devel
| |Version)
Severity|normal |enhancement
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6529] Evaluate NiX Spam DNSBL
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6529
--- Comment #3 from Warren Togami <wt...@gmail.com> 2010-12-30 23:23:56 UTC ---
Oops. The syntax was wrong. It works now.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6529] Evaluate NiX Spam DNSBL
Posted by bu...@issues.apache.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6529
--- Comment #2 from Warren Togami <wt...@gmail.com> 2010-12-30 13:49:36 UTC ---
omitting rule T_RCVD_IN_NIX_SPAM ifplugin Mail::SpamAssassin::Plugin::DNSEval #
{ due to tflags nopublish (tflags net nopublish)
omitting rule T_RCVD_IN_SPAMCOP ifplugin Mail::SpamAssassin::Plugin::DNSEval #
{ due to tflags nopublish (tflags net nopublish)
I don't understand it, but despite unwrapping it from the ifplugin block, it
still thinks that it is wrapped. I failed to workaround Bug #6527.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.