Re: Some last info regarding analysis

Kurt Magnusson wrote:
> 
> And since you bring up spam sources, from my own work, the phone numbers 
> and URLs is still an important source of identification. After some 
> months with a low number of spams in the mailbox, 3 weeks ago I hade a 
> surge (from 1-2 a day to 10-15 of a steady 30-35 spams/day) and 
> suspected a design flaw, but after analysing the spams it was a number 
> of new domains. After extracting ca 10-15 new domains, I was back to my 
> original figures.
> 

Kurt,

I attended the NIST workshop on spam yesterday and two ISPs (AOL and 
Yahoo) gave a presentation on their anti-spam methods. They have begun 
to utilize URL blocking which sounded similar to what you are trying to 
do. So far it seems pretty effective, although no exact figures were 
provided on the false positives.

Yakov
-------
Yakov Shafranovich / asrg <at> shaftek.org
SolidMatrix Technologies, Inc. / research <at> solidmatrix.com
"One who watches the wind will never sow, and one who keeps his eyes on 
the clouds will never reap" (Ecclesiastes 11:4)
-------