Re: Dead statistics feeds

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Sat, 22 Sep 2012 22:02:45 -0700 (PDT)

On Sat, 22 Sep 2012, Benny Pedersen wrote:
> super thanks, will redo dovecot-antispam to use spam in opendkim
> reporting, is there both (good/bad) reporting ?, how do opendkim handle
> user reporting ?

Reporting involves sending us a feed of information about the messages you
get (never the content; mainly the From: field's domain name and signature
information, plus an indication of whether you believe the message is
spam). That all gets aggregated into a database here and we compute
reputations based on the data we have across all reporting sites.

> cam i do with own dns repution zone ?

The data aggregation is backed by a MySQL database and the front end is a
PHP script that outputs JSON objects according to an experimental IETF
protocol. OpenDKIM also knows how to consume those JSON replies and
rate-limit questionable sources.

> while i thinked more about it can it be extended to do both local, and
> external with scoreing on both in the stats ?, that makes sense for me
> if it can, and it provide a better way of listning maillist imho, who
> will repute a maillist as spam sender ? :)

You can keep a local copy and generate a local database while also sending
stats to us if you like. You could use that to generate a DNS RPZ zone
if you like.

The aggregated stats on our side allows you to benefit from what others
are reporting, and also allows others to benefit from your reports.

-MSK
Received on Sun Sep 23 2012 - 05:03:08 PST