Re: Spamcop missing a LOT of spam lately

Kevin Hurni wrote:
> Thanks, I figured I'd post here just to get a response.

This top post puts your remark out of context to whatever it is you are
replying to.  You need to trim and contextualize your remarks.

> I referred to the subject lines and the content because that is how
> most spam filters work (they analyze the subject, content, and
> possibly IP address of sender).

Clearly you don't understand how your spamcop mail filter is supposed to
work, so you are going to have to educate yourself on how to configure
it for best effect.  SC mail filter uses blocklists, SA SpamAssassin,
and whitelists.

> But maybe spamcop ONLY blocks on IP address of the sender (which would
> explain a lot)?

If you configure to only use blocklists, that would be true.  Most
people use blocklists and SA.

> But it appears that you are suggesting to configure spamcop to block
> everything and then whitelist individual senders.

Personally I configure my SpamPal tight and count on whitelisting to
prevent any false positives.  Some people can't do that.

> Basially:  Compensate for the spamcop filtering that is missing stuff.

A filter filters the way the filter is configured to filter.  It isn't
an emotional thing.

> Kinda like people who have to configure their AV filter to block ALL
> incoming attachments for viruses to compensate for the time it takes
> for a pattern file to update.  (Poor design, IMO).

That sounds like another different discussion.  I don't have a problem
with false positives with my AV filter or with my spam filter.  You are
having a problem with false negatives with your spam filter, probably
because you don't understand it well enough.

> Ironically we have an Ironport system at work using Brightmail that
> catches far more than spamcop does (and I see spamcop is owned by
> Ironport).

SpamCop is owned by Ironport, yes.

> So perhaps I'm better contacting Ironport directly and asking what's
> going on.

Whatever trips your trigger.


-- 
Mike Easter
kibitzer, not SC admin