Re: e8 listings, how much revoke does it take?

"Vipul Ved Prakash" <[email protected]> Mon, 20 Nov 2006 15:23:41 -0800
Newsgroups gmane.mail.spam.razor.user
Message-ID <18BCE7A3E0538B4388C66912ED751896163CD4@EXCH-C1.corp.cloudmark.com>
Matt, 

This particular fingerprint happened to be an edge case that got marked
as "saturated" - ie all reports for it were being ignored because there
were too many reports for it. This is basically a bug, that affected
fingerprints received during a certain time window several months ago.
I have fixed this one manually and we are working on a script to
discover all such cases and fix them in a batch process.  Thanks for
pointing this out, and if there are others like it, please send them my
way. 

Cheers,
vipul

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Matt
Kettler
Sent: Monday, November 20, 2006 3:20 PM
To: razor users
Subject: [Razor-users] e8 listings, how much revoke does it take?

I've been repeatedly attempting to revoke a particular false-positive on
e8 in
razor, thus far I've revoked 4 consecutive FPs on different messages.

What's it take to revoke an obvious mis-listing? I know the voice of one
doesn't
over-ride the voice of many, but at the same time, how's this even
getting
listed in the first place? I'd expect it's ultimately just one mistaken
reporter. Can this one really be mis-reported by any decent number of
users?


Nov 20 17:54:41.315666 check[20745]: [ 6] mail 1.0 e=8 sig=_flogCRgdGkA:
Is
spam: cf 100 >= min_cf 21

That's a URI that comes in the subscribers-only newsletter associated
with NBC's
"The Biggest Looser" tv show. Strangely, the main website isn't listed,
but
their "biggestloserclubemail"  (it's a dotcom) domain is e8'ed. You'd
think that
all the URIs in the message would be listed, or none of them.

While I'll admit that many might find the email undesirable, it is in
fact
legitimate subscriber mail. If you fill out the forms on the website,
and leave
the "subscribe to xxx" checkboxes checked, you get the email.

The same domain also poisoned the outblaze uribl. I don't know if razor
is
accepting feeds from them at a high trust level or not, but that could
be the
problem. I doubt I'd ever have enough CF score to revoke a trusted
partner-feed,
if any such thing exists in razor. I contacted outblaze and they've
since fixed
their listing.

I can find no NANAS/NANAE complaints about this URI. If fact, I can't
find any
decent references to it anywhere in google groups, or anything useful on
google web.












------------------------------------------------------------------------
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share
your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDE
V
_______________________________________________
Razor-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/razor-users

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV