[sanesecurity] Re: FP on INetMsg.SpamDomain-2w.en25_com - again...

  • From: "Bill Landry" <bill@xxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Mon, 29 Jun 2009 11:47:48 -0700

> On Mon, Jun 29, 2009 at 10:37:27AM -0700, Bill Landry wrote:
>>
>> I stand by my statement.  Your results do not even come close to mine.
>
> Pretty definite. Could you atleast post the stats with little description
> of
> your setup?

Even though I am not the one making the claims, here are some quick stats
from one of my servers thus far today.

Matching both INetMsg and any URIBL:
egrep -c "INetMsg.*URIBL" /var/log/maillog
205

Matching only INetMsg and no URIBL:
egrep "INetMsg" /var/log/maillog | egrep -vc URIBL
176

As you can see, not even close to a 95% match.  And yes, all are confirmed
spam.  The URIBLs that I use are:

===============
multi.uribl.com
===============
URIBL_RED
URIBL_GREY
URIBL_BLACK

===============
multi.surbl.org
===============
URIBL_PH_SURBL
URIBL_JP_SURBL
URIBL_SC_SURBL
URIBL_WS_SURBL
URIBL_OB_SURBL
URIBL_AB_SURBL

===========
Stand Alone
===========
URIBL_RHS_DOB
URIBL_SBL
URIBL_BOFHLAND
URIBL_SWINOG
URIBL_JMF_BL
URIBL_MAILPOLICE

===========================
Hosted on my RBLDNSD server
===========================
URIBL_SEM_F
URIBL_SEMRED

But as I've said, these are just 'my' results, the have no basis in
reality to anyone elses results.

Bill


Other related posts: