The Brain{Storm,Dump}

_ This is a page for SpamAssassin developers and other intesrted parties to collaboratively jot down some ideas. Some of these might evolve into real code one day others might stay here forever. But as long as they are here, they are generally up for adaption and proof-of-concept implementations are welcome._

SVM and RF

MalteStretz: What's that?

trusted networks heuristic:

• doing reverse look-up of HELO, if it matches the user's domain, and forward DNS matches of that matches the IP address, then trust it - does that help? (may be helpful for extending the boundary)
• find an IP that matches exteral MX, know it's external then (probably not as helpful for finding a boundary?)
  

JustinMason: tried both of these before, expensive in terms of time, requires network lookups to compute trusted network boundary, also I got false negatives! (spams that were "close enough" to the MX record). Also this algo is very similar ot spamcop's.

DanielQuinlan: limit number of messages per sender (from morning talk)

• for Bayes learning to avoid over-training for that user (expiry, rolling over - how?)
• for rescoring process (like this idea)
  
  

Trustwebs for Whitelisting

See [TrustNetNotes].