[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: Whitelists in SA
From:       John Hardin <jhardin () impsec ! org>
Date:       2009-12-21 4:54:25
Message-ID: Pine.LNX.4.64.0912202049280.24754 () mercury ! impsec ! org
[Download RAW message or body]

On Sun, 20 Dec 2009, jdow wrote:

> I'm just a touch naive here; but, it seems to me it should be possible,
> somehow, to build running spamd daemons, one with the regular rules
> and one with the mass check rules.

There's nothing special about "masscheck rules". Masscheck is just running 
the current ruleset against hand-classified corpora (ideally _large_ 
hand-classified corpora) to see what hits.

> The second one is fed the email in parallel with the first but deletes 
> the mail once the scores are logged.

This can easily be done by analysis of spamd logs. It logs all the rules 
hit on every message scanned.

> The downside is that this is not "confirmed ham" and "confirmed spam".

That unfortunately is the critical part. You can easily glean whether or 
not SA thinks a message is "spammy" and what rules led to that 
classification, the tough part is confirming whether or not it's _right_.

> I wonder how much companies would pay for a part time SpamAssassin
> honcho who can be trusted (bonded?) and can write SARE-ish rules
> tailored to the company's email. Is there a job opportunity for
> somebody here?

I'd do that.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
   does quite what I want. I wish Christopher Robin was here."
 				           -- Peter da Silva in a.s.r
-----------------------------------------------------------------------
  5 days until Christmas
[prev in list] [next in list] [prev in thread] [next in thread]