Re: e8 listings, how much revoke does it take?
"Vipul Ved Prakash" <[email protected]> Mon, 20 Nov 2006 15:23:41 -0800
| Newsgroups | gmane.mail.spam.razor.user |
|---|---|
| Message-ID | <18BCE7A3E0538B4388C66912ED751896163CD4@EXCH-C1.corp.cloudmark.com> |
Matt, This particular fingerprint happened to be an edge case that got marked as "saturated" - ie all reports for it were being ignored because there were too many reports for it. This is basically a bug, that affected fingerprints received during a certain time window several months ago. I have fixed this one manually and we are working on a script to discover all such cases and fix them in a batch process. Thanks for pointing this out, and if there are others like it, please send them my way. Cheers, vipul -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Matt Kettler Sent: Monday, November 20, 2006 3:20 PM To: razor users Subject: [Razor-users] e8 listings, how much revoke does it take? I've been repeatedly attempting to revoke a particular false-positive on e8 in razor, thus far I've revoked 4 consecutive FPs on different messages. What's it take to revoke an obvious mis-listing? I know the voice of one doesn't over-ride the voice of many, but at the same time, how's this even getting listed in the first place? I'd expect it's ultimately just one mistaken reporter. Can this one really be mis-reported by any decent number of users? Nov 20 17:54:41.315666 check[20745]: [ 6] mail 1.0 e=8 sig=_flogCRgdGkA: Is spam: cf 100 >= min_cf 21 That's a URI that comes in the subscribers-only newsletter associated with NBC's "The Biggest Looser" tv show. Strangely, the main website isn't listed, but their "biggestloserclubemail" (it's a dotcom) domain is e8'ed. You'd think that all the URIs in the message would be listed, or none of them. While I'll admit that many might find the email undesirable, it is in fact legitimate subscriber mail. If you fill out the forms on the website, and leave the "subscribe to xxx" checkboxes checked, you get the email. The same domain also poisoned the outblaze uribl. I don't know if razor is accepting feeds from them at a high trust level or not, but that could be the problem. I doubt I'd ever have enough CF score to revoke a trusted partner-feed, if any such thing exists in razor. I contacted outblaze and they've since fixed their listing. I can find no NANAS/NANAE complaints about this URI. If fact, I can't find any decent references to it anywhere in google groups, or anything useful on google web. ------------------------------------------------------------------------ - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDE V _______________________________________________ Razor-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/razor-users ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV