[Bug 5158] New: DUL blacklists should probably be combined

[bu...@bugzilla.spamassassin.org]

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5158

           Summary: DUL blacklists should probably be combined
           Product: Spamassassin
           Version: 3.1.7
          Platform: All
        OS/Version: FreeBSD
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: silby@silby.com


Looking at the scores on spam I received, it struck me that DUL blacklist should
be handled differently than other blacklists.

For most blacklists, it makes sense to have a cumulative score.  Each additional
blacklist's listing of an IP increases the level of confidence that the IP is a
source of spam.

In the case of a DUL, the situation is slightly different.  The DULs *should* be
more accurate, because they shouldn't be changing all the time, like a normal
blacklist.  Therefore, perhaps what should be done is have all DULs combine into
a single rule.  0 DULs listing you = score 0.  1 to n DULs listing you, score X.

The way I see this working is that instead of RCVD_IN_SORBS_DUL giving you a
score of 2.0 and RCVD_IN_NJABL_DUL giving you a score of 1.9, the listing of an
IP in either one would give you a score of 4.0.  The listing in both would also
give you a score of 4.0.

This is just a theory, of course.  But I'd be curious to see what the
score-o-matic or whatever it's called would say about this theory.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.