[geeklog-spam] SWOT 0.2

Michael Jervis mjervis at gmail.com
Sat Feb 23 14:12:21 EST 2008


>  I assume you would keep track of where an entry came from? Let's say I
>  notice false positives and they're coming from a certain hop range. I'd
>  like to re-adjust my hop count and get rid of those entries automatically.

http://swot.fuckingbrit.com/#rules

Point 5 on the importing feeds:

It should be possible to mark a particular source of regular
expressions as untrusted, no matter who proxies that source to your
system, they should be ignored by your system.

So if you subscribe to my SWOT feed, and start getting stuff from
someone I trust, but you now don't trust, you can black list that item
from all sources.

I hadn't thought of the implications of changing the hop range for a
particular source, but it would make sense if the reference
implementation auto-removed entries that come from further down on the
hop chain from that feed. That would require you to record feed source
and final source against each item imported.

>  Or maybe that's already addressed by having two separate blacklists: My
>  SWOT list and the standard Spam-X IP blacklist.

Yeah, personally, I'd probably use Spam-X for my personal enemy items,
things that I want to block but not everyone would and only use the
SWOT blacklist for "generics".

But also, I was only thinking (not by any concious choice, just
through lazyness) that I was sharing content filters, not where urls
resolve to or who the posting host is.

Should other types of filter be shared on SWOT?

Cheers,

Mike



More information about the geeklog-spam mailing list