On 02/Nov/10 21:39, Darxus(_at_)ChaosReigns(_dot_)com wrote:
I had been thinking of reporting percentage of email from each IP which is
not spam with maybe only 5 distinct values (10, 30, 50, 70, 90%), and
reporting no information on the actual volume of email from the IP.
Now I'm thinking about providing non-spam percentages, and a number
indicating relative total volume of email from the IP, probably both
with a range of 256 values. Basically all the precision I think anybody
could find useful.
I'd like opinions on which would be better.
The second format might allow some sort of projective conglomeration of results.
UDP with verification of the sender makes sense. The Roaring Penguin /
mimedefang implementation, which I think I'll largely copy, uses a
SHA1 HMAC signature using a shared secret (and an 8 byte random report ID).
For the record, let me annotate the url:
http://tools.ietf.org/html/draft-dskoll-reputation-reporting
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg