[clue-admin] [Fwd: [SAGE] Jef Poskanzer's mail filtering tutorial]

[David Anselmi]

Here's some interesting reading on SPAM filtering.

Says that DNS RBLs are bad, doesn't mention Vipul's Razor or DCCs.  I've 
heard all of those recommended but can't say one way or another about 
them.  Obviously they aren't necessary for one guy.

Be interesting to see how he generates his stats--nice that he pointed 
out that monitoring them is important.  If you don't know your false 
positive/negative rates (and especially how many legitimate mails you 
lose) you shouldn't be doing SPAM filtering.

HTH,
Dave

-------- Original Message --------
Subject: [SAGE] Jef Poskanzer's mail filtering tutorial
Date: Thu, 26 May 2005 10:16:19 -0400
From: David Blank-Edelman <dnb at ccs.neu.edu>
To: SAGE Members <sage-members at usenix.org>

Encountered this on the clamav mailing list and thought others might
find it interesting as well:

http://www.acme.com/mail_filtering/

It's a good discussion of his spam/virus fighting attempts over the
years. His "direct action" conclusion is, umm...

         -- dNb