spf-discuss
[Top] [All Lists]

Re: Experimental phase

2004-02-03 09:59:20
Am Di, den 03.02.2004 schrieb Meng Weng Wong um 17:47:

The first step would be to go over the logs and do SPF lookups after the
fact.  We need code that will parse maillogs from several formats and:

 - measure the DNS cost of SPF-testing millions of messages
 - figure out the false positive rate
 - figure out the false negative rate
 - find out who the evites, the hallmarks, etc are
 - uncover any unexpected problems
 - etc

How can the positive/negative rate be tested?

If you have a good spam/virus filter a filter that runs after
SpamAssassin could dump the results of the spam/virus detection and the
Received-SPF line to a log file.

A script could then collect the data, sort and count.

False positives would be non-spam/virus with SPF fail/softfail/neutral
False negatives would be spam/virus with SPF pass (unknown?).

These false detections could then be analyzed further.

SPF none would then be the rest.

Something like that?


-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.5.txt
Wiki: http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡