[Dspam-user] Proposed change in whitelist behaviour/undo whitelisting

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Dspam-user] Proposed change in whitelist behaviour/undo whitelisting

Jens Finkhäuser
Hi all!

Over the past months (I've been distracted) I discussed with Stevan
Bajic some change in the way DSPAM whitelists email addresses, and
would like to ask what your take on it is.

Basically the one single aspect in which DSPAM fails me is that once
it's decided to whitelist an email address, it's really hard to tell
it not to.

The proposed change would affect how the whitelist threshold config
variable works, and therefore needs to be carefully considered, hence
my posting here.

The current behaviour:
  - A token needs 15x more innocent hits than spam hits to be
    considered for whitelisting, and
  - the token also needs to have more innocent hits than the whitelist

The proposed change is:
  - Consider a token whitelisted when:
    innocent hits - spam hits > whitelist threshold.
  - Reset innocent hits to zero once a whitelist token gets a spam

Aside from removing a magic factor, the behaviour shouldn't be too
different. For a new token that hasn't got spam hits, the whitelist
threshold config variable would still determine how many innocent hits
are needed to whitelist the token.

It's when the token also has spam hits that the behaviour becomes much
more responsive. A single spam hit would stop a whitelisted token from
being whitelisted.

If you kicked the token out of the whitelist that way, you'd then not
need 15 *times* as many innocent hits as spam hits, but "whitelist threshold"
*more*. It still depends on how often the token has been marked as
spam how long it'll take to whitelist it again.

For the full discussion, visit


1.21 Jiggabytes of memory should be enough for anybody.

What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its
next-generation tools to help Windows* and Linux* C/C++ and Fortran
developers boost performance applications - including clusters.
Dspam-user mailing list
[hidden email]

signature.asc (501 bytes) Download Attachment