* Gerald Oskoboiny <
[email protected]> [2003-10-28 00:35-0500]
> I use a whitelist and SA 2.60 for my W3C mail, and whitelist and
> bogofilter for personal mail, and I'm very happy with both of
> them. I would guess that less than 5-10 spams/day get through,
> and 300-400 are trapped, and false positives are very rare.
> (well, they seem to be, I don't really check any more.)
Actually, in the last week SA trapped 567 spams/day for my w3c mail,
and bogofilter trapped about 436 spams/day for my personal mail.
That's just over 1000 spams/day, from 1762 total messages/day.
(I may have underestimated how much spam gets through; may be as
much as 20-30 messages/day.)
My personal spam intake was a bit higher than it should have been
lately due to a configuration error: my backup MX was configured
to relay all mail sent to *@impressive.net to gerald@primary-mx,
with the result that mail to any address at my site was accepted,
instead of bogus addrs bouncing back.
I fixed that, but I am tempted to turn it back on and start feeding
mail sent to the bogus addrs directly into "sa-learn --spam", and
maybe even set up a bunch of extra addresses to use as spam honeypots.
(and maybe introduce a 5 min delay before processing mail sent to
valid addrs, to give SA a chance to learn from spam that already
hit the honeypots during the same spam attack)
--
Gerald Oskoboiny <
[email protected]>
http://impressive.net/people/gerald/