[Gross] perpetual match

[Jesse Thompson]

Eino Tuominen wrote:
> Jesse Thompson wrote:
>>
>> Next, I checked the gross logs.  There were 0 Grey entries for these
>> IP addresses going back 30 days.   hmmm
> 
> Check that you do have update = grey in config (it's the default).

It is


>> But why does it only happen to these few mailers?  Surely this would
>> be more random?
> 
> It really is possible to have this kind of deterministic behaviour with
> bloom filters. Suppose you have a client that is constantly on some
> blocklist, and who regurarly sends email to the same recipient in your
> organization. The triplet is always the same and it always is present in
> your bloom filter. Suppose that these other triplets collide with the
> earlier triplet. The result is just what you are seeing.
> 
>> Could this be leading to the bloom filter false positives?
> 
> I'm afraid so.

How likely will raising the filter bits setting help?

Jesse
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3340 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.utu.fi/pipermail/gross/attachments/20071107/ff4ff27b/attachment.bin>