Re: Spam filtering and mailagent
Paul Wade wrote: I have a problem in that spammers who got busted are trying for revenge by posting in usenet as [EMAIL PROTECTED], etc. I am getting a lot of junk mail and complaints from people who can't read headers and see the obvious. I have 2 questions: 1) Where can I automatically redirect mail for Jena, Aleisha, etc.? I had thought of redirecting it all to a spamsite autoresponder since it all comes with reply-to addresses that are invalid or autoresponders. Does anyone have a favorite destination address? ([EMAIL PROTECTED]) No, but whatever it is, it should be on your localhost -- so as to not waste any more bandwidth... 2) Is there an easy way in pine to change the From and Reply-to headers for a message or two? I want to use [EMAIL PROTECTED] for the few times I post anything. Consider [EMAIL PROTECTED] -- to stop spam at the source ... It will help to get even more of these people disconnected when they mail to such an address. OTOH you're right, of course: simply ignoring them doesn't make them go away. Sorry, can't help you with pine... -- Dimitri -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Spam filtering and mailagent
Hi, George == George Bonser [EMAIL PROTECTED] writes: George Take a look at exim. It has mail filtering built into the George MTA, no need to wait till delivery to check for spam. It George filter on header contents too. Much better if you remember George that your method generates at least one outgoing for every George spam in, internet-wide this means a spam of 50,000 emails George generates a potential 50,000 more. Better to quietly can the George mail before it ever gets to the user if it is from a known George spam domain than to send it on to a user's spam filter that George jams the mail server even more. I did. I just wanted something more powerfull, and mailagent is the most advanced filtering system I have seen. Oh, and the return mail is my idea; and I do monitor the traffic -- In my opinion I have not exceeded propriety. If this were a large installation, and I had the power to automatically censor all my users mail, I would have consdered a centralized system. Luckily, this is a single user subnet. manoj glad to be away from catering to 15,000 lusersend users -- The meek will inherit the earth ... in pine boxes six feet long by ... Manoj Srivastava url:mailto:[EMAIL PROTECTED] Mobile, Alabama USAurl:http://www.datasync.com/%7Esrivasta/ -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Spam filtering and mailagent
I have a problem in that spammers who got busted are trying for revenge by posting in usenet as [EMAIL PROTECTED], etc. I am getting a lot of junk mail and complaints from people who can't read headers and see the obvious. I have 2 questions: 1) Where can I automatically redirect mail for Jena, Aleisha, etc.? I had thought of redirecting it all to a spamsite autoresponder since it all comes with reply-to addresses that are invalid or autoresponders. Does anyone have a favorite destination address? ([EMAIL PROTECTED]) 2) Is there an easy way in pine to change the From and Reply-to headers for a message or two? I want to use [EMAIL PROTECTED] for the few times I post anything. It will help to get even more of these people disconnected when they mail to such an address. On Wed, 25 Jun 1997, George Bonser wrote: On 25 Jun 1997, Manoj Srivastava wrote: Hi, I have mailagent then configured to look at the adresses in that list and send an automated message to the sender asking to be removed from the list (I could just delete the mail, I guess), with a copy to the postmaster. +--+ + Paul Wade Greenbush Technologies Corporation + + mailto:[EMAIL PROTECTED] http://www.greenbush.com/ + +--+ + http://www.greenbush.com/cds.html Special Linux CD offer + +--+ -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Spam filtering and mailagent
Set up a bogus user account with those names, create a symlink in /var/spool/mail/user-name that points to /dev/null. All email will get appended to /dev/null :) Use /bin/true as the shell for those users so nobody can actually log in. On Wed, 25 Jun 1997, Paul Wade wrote: I have a problem in that spammers who got busted are trying for revenge by posting in usenet as [EMAIL PROTECTED], etc. I am getting a lot of junk mail and complaints from people who can't read headers and see the obvious. I have 2 questions: 1) Where can I automatically redirect mail for Jena, Aleisha, etc.? I had thought of redirecting it all to a spamsite autoresponder since it all comes with reply-to addresses that are invalid or autoresponders. Does anyone have a favorite destination address? ([EMAIL PROTECTED]) 2) Is there an easy way in pine to change the From and Reply-to headers for a message or two? I want to use [EMAIL PROTECTED] for the few times I post anything. It will help to get even more of these people disconnected when they mail to such an address. On Wed, 25 Jun 1997, George Bonser wrote: On 25 Jun 1997, Manoj Srivastava wrote: Hi, I have mailagent then configured to look at the adresses in that list and send an automated message to the sender asking to be removed from the list (I could just delete the mail, I guess), with a copy to the postmaster. +--+ + Paul Wade Greenbush Technologies Corporation + + mailto:[EMAIL PROTECTED] http://www.greenbush.com/ + +--+ + http://www.greenbush.com/cds.html Special Linux CD offer + +--+ -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] . George Bonser [EMAIL PROTECTED], [EMAIL PROTECTED] -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Re: Spam filtering and mailagent
Take a look at exim. It has mail filtering built into the MTA, no need to wait till delivery to check for spam. It filter on header contents too. Much better if you remember that your method generates at least one outgoing for every spam in, internet-wide this means a spam of 50,000 emails generates a potential 50,000 more. Better to quietly can the mail before it ever gets to the user if it is from a known spam domain than to send it on to a user's spam filter that jams the mail server even more. On 25 Jun 1997, Manoj Srivastava wrote: Hi, I have mailagent then configured to look at the adresses in that list and send an automated message to the sender asking to be removed from the list (I could just delete the mail, I guess), with a copy to the postmaster. George Bonser [EMAIL PROTECTED], [EMAIL PROTECTED] -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .
Spam filtering and mailagent
Hi,
There are some sites that update a list of spammers addresses
quite regularily, and I use that to filter out all the junk that by
all reports is increasingly evident. I run two scripts weekly through
cron to grab the lists (the listing are given below).
I have mailagent then configured to look at the adresses in
that list and send an automated message to the sender asking to be
removed from the list (I could just delete the mail, I guess), with a
copy to the postmaster.
Haven't smelt spam in weeks. I guess I could invest in
sendmail configuration, but mailagent hacking is relatively easy.
manoj
ps: Yes, I do recieve spam, I just don't get to see it unless I want
to (well, may happen one of these days).
-
#! /usr/bin/perl
use strict;
use LWP::Simple;
my $AOL = http://www.idot.aol.com/preferredmail/;;
my $SPAMLIST = $ENV{'HOME'}/etc/SPAM-aol;
chdir;
$_ = get $AOL or die Cannot get $AOL\n;
s/^[\s\S]*MULTICOL.*\n// or die missing MULTICOL in $_ ;
s/\/MULTICOL[\s\S]*// or die missing /MULTICOL in $_ ;
open STDOUT, $SPAMLIST or die create $SPAMLIST: $!;
## be sure $1 is what you want in the annotation
print map /^(([EMAIL PROTECTED])?\Q$_\E)\$/i\n, split /\n/;
exit 0;
__END__
-
#! /usr/bin/perl
use strict;
use LWP::Simple;
my $MINDSPRING = http://www.atl.mindspring.com/cgi-bin/spamlist.pl;;
my $SPAMLIST = $ENV{'HOME'}/etc/SPAM-mindspring;
chdir;
$_ = get $MINDSPRING or die Cannot get $MINDSPRING\n;
open STDOUT, $SPAMLIST or die create $SPAMLIST: $!;
## be sure $1 is what you want in the annotation
##print map /^(([EMAIL PROTECTED])?\Q$_\E)\$/i\n, split /\n/;
s,^[\s\S]*?pre[^\n]*\n,, or
die can't find block of hostnames;
s,/pre[\s\S]*?pre[^\n]*\n,, or
die can't find block of email addresses;
s,/pre[\s\S]*$,,;
print map /^( . (/\@/ ? : ([EMAIL PROTECTED])?) . \Q$_\E)\$/i\n, split
/\n/;
exit 0;
__END__
-
#excerpt from mailagent.rules
##
##
##
#Now, take care of spammers. #
##
##
##
# Not explicitely for me. Mail lost or bcc'ed.
!To !Cc: srivasta { REJECT LOST };
#This shall be greatly expanded
Relayed From Reply-To Message-Id: SPAM {
ANNOTATE -d X-Spam Smells like spam from %1;
REJECT SPAM };
Relayed From Reply-To Message-Id: SPAM-aol {
ANNOTATE -d X-Spam Smells like spam-aol from %1;
REJECT SPAM };
Relayed From Reply-To Message-Id: SPAM-mindspring {
ANNOTATE -d X-Spam Smells like spam-mindspring from %1;
REJECT SPAM };
X-[0-9]: /cyberpromo\.com/i {
ANNOTATE -d X-Spam Smells like spam from cyberpromo;
REJECT SPAM };
X-Mailer: /floodgate/i {
ANNOTATE -d X-Spam Smells like spam from floodgate;
REJECT SPAM };
Message-ID: /\[EMAIL PROTECTED]/, /[EMAIL PROTECTED]@/ {
ANNOTATE -d X-Spam Smells like a bogus message ID;
REJECT SPAM };
LOST Comments: /^Authenticated sender/i {
ANNOTATE -d X-Spam Smells like spam;
REJECT SPAM };
!SPAM Comments: /^Authenticated sender/i { REJECT MAY_SPAM };
MAY_SPAM Subject: /money/i{ ANNOTATE -d X-Spam Money; REJECT SPAM };
MAY_SPAM X-Uidl: /^\w+$/i { REJECT SPAM };
MAY_SPAM Precedence: /^bulk/i { REJECT SPAM };
MAY_SPAM { REJECT INITIAL };
SPAM { VACATION off; MESSAGE ~/etc/spam;
SAVE spam.list };
#
# The rest is potentially personal mail
# By default, beep three times for mail ending up in my mailbox
#
{ BEEP 3; REJECT }
All: /./{ UNIQUE -a; SAVE important };
##
##
##
# End of mailagent rules #
##
##
##
--
etc/spam contains:
--
Subject: This is a recording... [Re: %R]
Organization: %o
Cc: [EMAIL PROTECTED]
