Re: spamfilter for procmail
On Mon, Oct 16, 2000 at 04:09:05PM -0700, Michael Elkins wrote: I'll just add my $0.02US to this and agree with Bruce's example. After spending lots of time trying to weed out spammers, I found the most effective filter was to simple accept all known addresses and everything else goes into a spam folder. Nearly all the spam I receive is not addressed to me or one of the mailing lists I subscribe to. You just have to remember to read your spam folder every once in a while. I actually have a +spam at the end of my `mailboxes' line in my .muttrc to remind me I have mail waiting there. me I use the exact same procedure with the added benefit of automatically accepting email from anyone in my company since so many of them bcc me or use an alias that is not expanded. I simply use a rule that accepts all mail from my domain. It works wonders. /Duncan -- Duncan Watson System Engineer [EMAIL PROTECTED] nCUBE - Beaverton [For best reading adjust your window width to the length of this line -djw] 123456789012345678901234567890123456789012345678901234567890123456789012345
Re: spamfilter for procmail
On Wed, Oct 18, 2000 at 05:33:05PM -0700, Duncan Watson wrote: I use the exact same procedure with the added benefit of automatically accepting email from anyone in my company since so many of them bcc me or use an alias that is not expanded. I simply use a rule that accepts all mail from my domain. Try http://www.spambouncer.org/ . I haven't actually gotten around to installing it, but I've heard it works wonders. -- Daniel J. Peng /"\ Harry Browne, Libertarian \ / ASCII Ribbon Campaign for President! X Against Outlook HTML Mail http://www.harrybrowne.org/ / \ http://www.thebackrow.net/ Pelorat sighed. "I will never understand people." "There's nothing to it. All you have to do is take a close look at yourself and you will understand everyone else. How would Seldon have worked out his Plan -- and I don't care how subtle his mathematics was -- if he didn't understand people; and how could he have done that if people weren't easy to understand? You show me someone who can't understand people and I'll show you someone who has built up a false image of himself -- no offense intended." -- Asimov, "Foundation's Edge"
mailboxes (was Re: spamfilter for procmail)
On Mon, Oct 16, 2000 at 04:09:05PM -0700 or so it is rumoured hereabouts, Michael Elkins thought: I'll just add my $0.02US to this and agree with Bruce's example. After spending lots of time trying to weed out spammers, I found the most effective filter was to simple accept all known addresses and everything else goes into a spam folder. Nearly all the spam I receive is not addressed to me or one of the mailing lists I subscribe to. You just have to remember to read your spam folder every once in a while. I actually have a +spam at the end of my `mailboxes' line in my .muttrc to remind me I have mail waiting there. me Incidentally, does anyone know of a way to cycle through the list of folders with new mail on the "c" command. for instance, my Work-related mailboxes are listed before the lists in .muttrc but there's times when I'm expecting a response to a question sent to a list and I'd like a tab key or something to cycle through which mailboxes have new mail. See? :-) -- Conor Daly [EMAIL PROTECTED] Domestic Sysadmin :-)
Re: mailboxes (was Re: spamfilter for procmail)
Conor Daly [EMAIL PROTECTED] wrote on Tue, 17 Oct 2000: Incidentally, does anyone know of a way to cycle through the list of folders with new mail on the "c" command. You mean, like space does? Mikko -- // Mikko Hänninen, aka. Wizzu // [EMAIL PROTECTED] // http://www.iki.fi/wiz/ // The Corrs list maintainer // net.freak // DALnet IRC operator / // Interests: roleplaying, Linux, the Net, fantasy scifi, the Corrs / "Scotty, beam us aboard." "Aye, sir. Will a 2x4 do?"
Re: mailboxes (was Re: spamfilter for procmail)
On Tue, Oct 17, 2000 at 10:18:31AM +0100, Conor Daly wrote: Incidentally, does anyone know of a way to cycle through the list of folders with new mail on the "c" command. for instance, my Work-related mailboxes are listed before the lists in .muttrc but there's times when I'm expecting a response to a question sent to a list and I'd like a tab key or something to cycle through which mailboxes have new mail. Space bar, as Mikko said. Or: use the tab key often enough, and it will get you to the mailboxes list. -- - Bruce
Re: mailboxes (was Re: spamfilter for procmail)
On 2000-10-17 10:18:31 +0100, Conor Daly wrote: Incidentally, does anyone know of a way to cycle through the list of folders with new mail on the "c" command. for instance, my Work-related mailboxes are listed before the lists in .muttrc but there's times when I'm expecting a response to a question sent to a list and I'd like a tab key or something to cycle through which mailboxes have new mail. Try space. -- Thomas Roessler [EMAIL PROTECTED]
Re: spamfilter for procmail
Hi, On 17.10, Suresh Ramasubramanian wrote: Besides this, at the MTA level, see if you can get your sysadmin to support the RBL and DUL blacklists at least (also the RSS if possible) - http://www.mail-abuse.org There is a tool called blcheck, which can be used as a procmail-filter, and it can use any DNS-RBL you like. I works great for me and you don't even need to pester your BOFH to enable this. IIRC I patched it ligthly to work as a filter. Just ask for it and I´ll post that, too. The author did not respond to me. The URL for this is: http://www.samspade.org/w/blcheck/ Cheerio Martin -- http://www.dmcs.de/mailto:[EMAIL PROTECTED] Tel: 07 21/9 20 60-42 digital marketing concepts services GmbH Fax: 07 21/9 20 60-30 martin:x:518:112:Martin Treusch von Buttlar:/home/martin:/usr/bin/perl
Re: spamfilter for procmail
On Mon, Oct 16, 2000 at 03:43:46PM -0700, Dale Morris [EMAIL PROTECTED] wrote: could someone post a simple spam receipe for procmail? I'm afraid I'll end up filtering out my important mails. You know, things like distant relatives writing to give me money and such.. thanks I method I used while at school is documented at http://www.css.tayloru.edu/~bbell/spam-filter/ -- Bob Bell [EMAIL PROTECTED] - "Linux is like living in a teepee. No Windows, no Gates, Apache in house." -- Usenet signature, author unknown
Re: spamfilter for procmail
Martin Treusch von Buttlar proclaimed on mutt-users that: There is a tool called blcheck, which can be used as a procmail-filter, and it can use any DNS-RBL you like. I works great for me and you don't even need to pester your BOFH to enable this. Like I said, spambouncer and walt dnes' spamdunk both have this capablity. I know about blcheck - and Steve Atkins ususally responds rather fast ... or you could post your note to news.admin.net-abuse.email / the spam-l@peach.ease.lsoft.com mailing lists, where this'd be more on-topic, and which Steve reads on a regular basis. IIRC I patched it ligthly to work as a filter. Just ask for it and I´ll post that, too. The author did not respond to me. The URL for this is: http://www.samspade.org/w/blcheck/ Only hassle is that procmailing to block spam is like shutting the stable _after_ the horse has bolted. You've already received the mail ... so any saving in cost is illusory at best (esp with a desktop linux box connected over ppp) MTA blocks are far better -- Suresh Ramasubramanian + Wallopus Malletus Indigenensis mallet @ cluestick.org + Lumber Cartel of India, tinlcI Be prepared to accept sacrifices. Vestal virgins aren't all that bad.
Re: mailboxes (was Re: spamfilter for procmail)
On Tue, Oct 17, 2000 at 10:18:31AM +0100, Conor Daly wrote: Incidentally, does anyone know of a way to cycle through the list of folders with new mail on the "c" command. for instance, my Work-related mailboxes are listed before the lists in .muttrc but there's times when I'm expecting a response to a question sent to a list and I'd like a tab key or something to cycle through which mailboxes have new mail. See? :-) See the second paragraph in section 3.11 of the mutt manual. -- Take a look in Hagbard's World: | mutt.octet.filter - autoview octet-streams http://www.hagbard.demon.co.uk/ | mutt.vcard.filter - autoview simple vcards http://www.acemake.com/hagbard/ | muttrc2html - muttrc - HTML utility Free software, including| muttrc.sl - Jed muttrc mode
Re: spamfilter for procmail
Suresh Ramasubramanian [EMAIL PROTECTED] wrote on Tue, 17 Oct 2000: Only hassle is that procmailing to block spam is like shutting the stable _after_ the horse has bolted. You've already received the mail ... so any saving in cost is illusory at best (esp with a desktop linux box connected over ppp) I don't know, I think the annoyance factor reduction is quite significant, and that shouldn't be discounted. True, there are no real material cost savings achievable at this point. Mikko -- // Mikko Hänninen, aka. Wizzu // [EMAIL PROTECTED] // http://www.iki.fi/wiz/ // The Corrs list maintainer // net.freak // DALnet IRC operator / // Interests: roleplaying, Linux, the Net, fantasy scifi, the Corrs / Bumper sticker: Alcohol and calculus don't mix. Never drink and derive.
Re: spamfilter for procmail
Mikko Hänninen proclaimed on mutt-users that: I don't know, I think the annoyance factor reduction is quite significant, and that shouldn't be discounted. True, there are no real material cost savings achievable at this point. As a sysadmin for a largish isp + portal, my interests center more around the cost factor ;) I prefer to do my spam blocking at the company mailserver ... and have procmail to deal with bozos I don't want to talk to, but wouldn't want to block across a dozen domains. -- Suresh Ramasubramanian + Wallopus Malletus Indigenensis mallet @ cluestick.org + Lumber Cartel of India, tinlcI Maybe Computer Science should be in the College of Theology. -- R. S. Barton
Re: spamfilter for procmail
On Tue, Oct 17, 2000 at 07:07:05PM +0530, Suresh Ramasubramanian wrote: Only hassle is that procmailing to block spam is like shutting the stable _after_ the horse has bolted. You've already received the mail ... so any saving in cost is illusory at best (esp with a desktop linux box connected over ppp) I suppose you can call it an illusion but there's something to be said for having UCE dropped into a separate folder (or /dev/null) so you don't have to be bothered with it. I'd call it a "cost saving" in that it becomes a hell of a lot less annoying (and, if you're into reporting such email abuse there is the added benefit of having the email so you can go to work on it). -- Take a look in Hagbard's World: | mutt.octet.filter - autoview octet-streams http://www.hagbard.demon.co.uk/ | mutt.vcard.filter - autoview simple vcards http://www.acemake.com/hagbard/ | muttrc2html - muttrc - HTML utility Free software, including| muttrc.sl - Jed muttrc mode
Re: spamfilter for procmail
Dave Pearson proclaimed on mutt-users that: to be bothered with it. I'd call it a "cost saving" in that it becomes a hell of a lot less annoying (and, if you're into reporting such email abuse there is the added benefit of having the email so you can go to work on it). Point taken - and whatever slips through my filters gets larted heavily :) I have more time to sit and compose a more comprehensive lart ... and possibly follow up with the good folks at the RBL. -- Suresh Ramasubramanian + Wallopus Malletus Indigenensis mallet @ cluestick.org + Lumber Cartel of India, tinlcI "During the race We may eat your dust, But when you graduate, You'll work for us." -- Reed College cheer
Re: mailboxes (was Re: spamfilter for procmail)
On Tue, Oct 17, 2000 at 03:16:10PM +0300 or so it is rumoured hereabouts, Mikko Hänninen thought: Conor Daly [EMAIL PROTECTED] wrote on Tue, 17 Oct 2000: Incidentally, does anyone know of a way to cycle through the list of folders with new mail on the "c" command. You mean, like space does? OOOHHH!! Thanks -- Conor Daly [EMAIL PROTECTED] Domestic Sysadmin :-)
Re: spamfilter for procmail
Suresh Ramasubramanian wrote: Martin Treusch von Buttlar proclaimed on mutt-users that: There is a tool called blcheck, which can be used as a procmail-filter, and it can use any DNS-RBL you like. I works great for me and you don't even need to pester your BOFH to enable this. Like I said, spambouncer and walt dnes' spamdunk both have this capablity. I know about blcheck - and Steve Atkins ususally responds rather fast ... or you could post your note to news.admin.net-abuse.email / the spam-l@peach.ease.lsoft.com mailing lists, where this'd be more on-topic, and which Steve reads on a regular basis. IIRC I patched it ligthly to work as a filter. Just ask for it and I´ll post that, too. The author did not respond to me. The URL for this is: http://www.samspade.org/w/blcheck/ Only hassle is that procmailing to block spam is like shutting the stable _after_ the horse has bolted. You've already received the mail ... so any saving in cost is illusory at best (esp with a desktop linux box connected over ppp) not if you run procmail on the other side of the modem before popping the mail to the local host. MTA blocks are far better and it only takes one line in sendmail.cf :) raf
Re: spamfilter for procmail
raf proclaimed on mutt-users that: not if you run procmail on the other side of the modem before popping the mail to the local host. That saves you part of the cost - but your ISP still has to bear the cost of receiving the spam - and several ISPs figure out the costs involved in getting spammed and running an abuse desk / hiring admins to block spam. Who do you think bears all these costs? The users. MTA blocks are far better and it only takes one line in sendmail.cf :) It takes just the same (but in plain english, more or less) in exim ;) -- Suresh Ramasubramanian + Wallopus Malletus Indigenensis mallet @ cluestick.org + Lumber Cartel of India, tinlcI Be valiant, but not too venturous. Let thy attire be comely, but not costly. -- John Lyly
spamfilter for procmail
could someone post a simple spam receipe for procmail? I'm afraid I'll end up filtering out my important mails. You know, things like distant relatives writing to give me money and such.. thanks
Re: spamfilter for procmail
On Mon, Oct 16, 2000 at 03:43:46PM -0700, Dale Morris wrote: could someone post a simple spam receipe for procmail? I'm afraid I'll end up filtering out my important mails. You know, things like distant relatives writing to give me money and such.. thanks Though this is off topic, might as well answer at the same time. The following is what I have set up. It's not too fancy. It doesn't toast the mail, it merely sticks it into a 'spam' folder. This is the only way to be safe about spam. Periodically I go through the spam folder and manually check for anything worthwhile, deleting the rest -- it's usually pretty fast to do this. -- - Bruce PATH=/bin:/usr/bin MAILDIR=$HOME/mail # check for spam :0H: * ^X-advertisement: spam #check for more spam :0H: * !^To: spam # check for more spam -- anything not addressed to me :0H * !^TO(bruce|Blind\.Copy\.Receiver) spam
Re: spamfilter for procmail
On 10/16, Dale Morris rearranged the electrons to read: could someone post a simple spam receipe for procmail? I'm afraid I'll end up filtering out my important mails. You know, things like distant relatives writing to give me money and such.. thanks Here are a few simple recipes I have in one of my .procmailrc's: :0: * ^From:.*(moneyworld|fincon|selfhelpnet|natureplus)\.com(\|$) /dev/null :0: * ^TO(moneyworld|fincon|selfhelpnet|natureplus)\.com(\|$) /dev/null :0: * ^Subject: Accept Credit Cards* /dev/null :0: * ^From:.*Toll2troll@aol\.com(\|$) /dev/null Hope this helps you. "man 5 procmailrc" and "man 5 procmailex" have some good information in them, too, regarding your .procmailrc file. Good luck, Jamie
Re: spamfilter for procmail
On Mon, Oct 16, 2000 at 06:57:39PM -0400, Bruce DeVisser wrote: Though this is off topic, might as well answer at the same time. The following is what I have set up. It's not too fancy. It doesn't toast the mail, it merely sticks it into a 'spam' folder. This is the only way to be safe about spam. Periodically I go through the spam folder and manually check for anything worthwhile, deleting the rest -- it's usually pretty fast to do this. I'll just add my $0.02US to this and agree with Bruce's example. After spending lots of time trying to weed out spammers, I found the most effective filter was to simple accept all known addresses and everything else goes into a spam folder. Nearly all the spam I receive is not addressed to me or one of the mailing lists I subscribe to. You just have to remember to read your spam folder every once in a while. I actually have a +spam at the end of my `mailboxes' line in my .muttrc to remind me I have mail waiting there. me
Re: spamfilter for procmail
Dale Morris proclaimed on mutt-users that: could someone post a simple spam receipe for procmail? I'm afraid I'll end up filtering out my important mails. You know, things like distant relatives writing to give me money and such.. Two of the best I've seen are - 1. Catherine Hampton's Spambouncer - http://www.spambouncer.org 2. Walter Dnes' Recipes - http://www.waltdnes.org Besides this, at the MTA level, see if you can get your sysadmin to support the RBL and DUL blacklists at least (also the RSS if possible) - http://www.mail-abuse.org As The Well is one of the oldest (and most clued) ISPs around, they likely use the rbl already. +suresh http://www.india.cauce.org - stopping spam in india -- Suresh Ramasubramanian + Wallopus Malletus Indigenensis mallet @ cluestick.org + Lumber Cartel of India, tinlcI April is the cruellest month... -- Thomas Stearns Eliot
