Re: spam from bugs.debian.org

2007-05-14 Thread Michelle Konzack
Am 2007-05-07 13:13:59, schrieb Wouter Verhelst:
 On Sun, May 06, 2007 at 11:13:50AM +0300, Andrei Popescu wrote:
  I don't know how much this helps, but wouldn't it be good to more
  actively *recommend* the posters to subscribe to [EMAIL PROTECTED]
  Something like a monthly reminder sent over all lists or similar.
 
 Next spammers will go ahead and whitelist themselves, too.

I am subscribed on [EMAIL PROTECTED] but what I like
to see is if the the whitlisting can only be done,
if someone whitelist with a valid GPG signed message.

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack   Apt. 917  ICQ #328449886
   50, rue de Soultz MSN LinuxMichi
0033/6/6192519367100 Strasbourg/France   IRC #Debian (irc.icq.com)


signature.pgp
Description: Digital signature


Re: spam from bugs.debian.org

2007-05-08 Thread David Moreno Garza
Andrei Popescu:
  Next spammers will go ahead and whitelist themselves, too.
 
 Then what is the purpose of [EMAIL PROTECTED]

The purpose is quite clear, the real question would be how whitelist@
manages suscribing, whitelisting. Is this only by been suscribed? Or
does some other policy apply?

-- 
David Moreno Garza [EMAIL PROTECTED] | http://www.damog.net/
 Todos quieren estar bien aunque se chinguen los demás.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-05-07 Thread Wouter Verhelst
On Sun, May 06, 2007 at 11:13:50AM +0300, Andrei Popescu wrote:
 On Wed, Apr 25, 2007 at 05:01:36PM +0200, Martin Zobel-Helas wrote:
 
  I belive that a rate of 0.1% is quite an acceptable rate, but we
  permanently try to lower that.
 
 I don't know how much this helps, but wouldn't it be good to more
 actively *recommend* the posters to subscribe to [EMAIL PROTECTED]
 Something like a monthly reminder sent over all lists or similar.

Next spammers will go ahead and whitelist themselves, too.

-- 
Shaw's Principle:
Build a system that even a fool can use, and only a fool will
want to use it.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-05-07 Thread Andrei Popescu
On Mon, May 07, 2007 at 01:13:59PM +0200, Wouter Verhelst wrote:

  I don't know how much this helps, but wouldn't it be good to more
  actively *recommend* the posters to subscribe to [EMAIL PROTECTED]
  Something like a monthly reminder sent over all lists or similar.
 
 Next spammers will go ahead and whitelist themselves, too.

Then what is the purpose of [EMAIL PROTECTED]

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature


Re: spam from bugs.debian.org

2007-05-07 Thread Andrei Popescu
On Mon, May 07, 2007 at 01:13:59PM +0200, Wouter Verhelst wrote:

  I don't know how much this helps, but wouldn't it be good to more
  actively *recommend* the posters to subscribe to [EMAIL PROTECTED]
  Something like a monthly reminder sent over all lists or similar.
 
 Next spammers will go ahead and whitelist themselves, too.

Then what's the purpose of [EMAIL PROTECTED]

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature


Re: spam from bugs.debian.org

2007-05-06 Thread Andrei Popescu
On Wed, Apr 25, 2007 at 05:01:36PM +0200, Martin Zobel-Helas wrote:

 I belive that a rate of 0.1% is quite an acceptable rate, but we
 permanently try to lower that.

I don't know how much this helps, but wouldn't it be good to more
actively *recommend* the posters to subscribe to [EMAIL PROTECTED]
Something like a monthly reminder sent over all lists or similar.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature


Re: spam from bugs.debian.org

2007-04-25 Thread Don Armstrong
On Wed, 25 Apr 2007, Kamaraju S Kusumanchi wrote:
 Of late, I have been seeing a lot of spam from bugs.debian.org . I never got
 this many spam emails from BTS. Has something changed?

Not really; it's just the continuing battle between spammers and Blars
(and to a lesser extent, the rest of us with owner@ hats). Rules are
put in place to block spam that gets through. [Just to give you an
idea of how much spam we do block; every day the BTS discards around
4G of non-duplicate spam; I've no idea how much in total we ditch.]

 How does everyone deal with this (I mean other than filtering)?

If anyone is doing a substantially better job of filtering than the
bts is, let [EMAIL PROTECTED] know; but in general you should just
see the few spammers who end up being successful.


Don Armstrong

-- 
Those who begin coercive elimination of dissent soon find themselves
exterminating dissenters. Compulsory unification of opinion achieves
only the unanimity of the graveyard.
 -- Justice Roberts in 319 U.S. 624 (1943)

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-25 Thread Martin Zobel-Helas
Hi, 

On Wed Apr 25, 2007 at 01:08:32 -0700, Don Armstrong wrote:
 On Wed, 25 Apr 2007, Kamaraju S Kusumanchi wrote:
  Of late, I have been seeing a lot of spam from bugs.debian.org . I never got
  this many spam emails from BTS. Has something changed?
 
 Not really; it's just the continuing battle between spammers and Blars
 (and to a lesser extent, the rest of us with owner@ hats). Rules are
 put in place to block spam that gets through. [Just to give you an
 idea of how much spam we do block; every day the BTS discards around
 4G of non-duplicate spam; I've no idea how much in total we ditch.]
 
  How does everyone deal with this (I mean other than filtering)?
 
 If anyone is doing a substantially better job of filtering than the
 bts is, let [EMAIL PROTECTED] know; but in general you should just
 see the few spammers who end up being successful.

Same for lists.debian.org. Just to give an impression from yesterdays
statistics:

  94108   delivery attempts (incoming)
  51598   messages received (in total)
  rest blocked by whatever RBL
  10426   messages feed to spam search software
  rest already cought by static filtering
   1523   messages tagged as no spam
===
   ~1% of delivery attempts (incoming) is still send out to the lists

If we now say, that out of these 1523 mails, ~150 mails are still spam,
this makes a 0.1% rate of spam that is still deleivired to the lists.

I belive that a rate of 0.1% is quite an acceptable rate, but we
permanently try to lower that. Perhaps we should really propose a Day
of No Spam-Filtering on lists.d.o. ;-)

Greetings
Martin
-- 
[EMAIL PROTECTED] /root]# man real-life
No manual entry for real-life


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-25 Thread Greg Folkert
On Wed, 2007-04-25 at 17:01 +0200, Martin Zobel-Helas wrote:
 Perhaps we should really propose a Day of No Spam-Filtering on
 lists.d.o. ;-)

Umm, is there enough BANDWIDTH ON THE ENTARWEB to support that?

/me thinks not
-- 
greg, [EMAIL PROTECTED]

The technology that is
Stronger, better, faster:  Linux


signature.asc
Description: This is a digitally signed message part


Re: spam from bugs.debian.org

2007-04-25 Thread Kamaraju S Kusumanchi
Martin Zobel-Helas wrote:

  How does everyone deal with this (I mean other than filtering)?
 
 If anyone is doing a substantially better job of filtering than the
 bts is, let [EMAIL PROTECTED] know; but in general you should just
 see the few spammers who end up being successful.
 

I have been dealing with gcc's bugzilla, KDE's bugs.kde.org, mozilla's bug
tracking system etc., I never ever received any spam messages from these
bug tracking systems. The spam emails seem to come only from BTS. May be we
can learn from them as to what they are doing (mandatory registration?)
better.

 Same for lists.debian.org. Just to give an impression from yesterdays
 statistics:
 
   94108   delivery attempts (incoming)
   51598   messages received (in total)
   rest blocked by whatever RBL
   10426 messages feed to spam search software
   rest already cought by static filtering
1523   messages tagged as no spam
 ===
~1% of delivery attempts (incoming) is still send out to the lists
 
 If we now say, that out of these 1523 mails, ~150 mails are still spam,
 this makes a 0.1% rate of spam that is still deleivired to the lists.
 

I am not saying the lists are not filtering spam emails. Of course they do
and they do an excellent job at that. But as an end user, all I see is 1523
emails, 150 of them are spam == 10% spam emails from debian.org lists. May
be a policy change is required here as well. I dont know what would be the
correct way, but this method sure does seem inefficient and waste of
resources.

hth
raju

-- 
Kamaraju S Kusumanchi
http://www.people.cornell.edu/pages/kk288/
http://malayamaarutham.blogspot.com/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-25 Thread Steve Greenland
On 25-Apr-07, 11:45 (CDT), Kamaraju S Kusumanchi [EMAIL PROTECTED] wrote: 
 I have been dealing with gcc's bugzilla, KDE's bugs.kde.org, mozilla's bug
 tracking system etc., I never ever received any spam messages from these
 bug tracking systems. The spam emails seem to come only from BTS. May be we
 can learn from them as to what they are doing (mandatory registration?)
 better.

I'd guess that Bugzilla's mandatory registration is why. OTOH,
Bugzilla's mandatory is why I rarely report bugs for projects that use
Bugzilla. I don't think making it harder for users to report problems is
a good trade-off.

Steve

-- 
Steve Greenland
The irony is that Bill Gates claims to be making a stable operating
system and Linus Torvalds claims to be trying to take over the
world.   -- seen on the net


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-25 Thread Daniel Jacobowitz
On Wed, Apr 25, 2007 at 12:45:06PM -0400, Kamaraju S Kusumanchi wrote:
 I have been dealing with gcc's bugzilla, KDE's bugs.kde.org, mozilla's bug
 tracking system etc., I never ever received any spam messages from these
 bug tracking systems. The spam emails seem to come only from BTS. May be we
 can learn from them as to what they are doing (mandatory registration?)
 better.

Unfortunately spammers seem to have learned how to register with
bugzilla, lately.

-- 
Daniel Jacobowitz
CodeSourcery


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-25 Thread David Moreno Garza
Steve Greenland wrote:
 I'd guess that Bugzilla's mandatory registration is why. OTOH,
 Bugzilla's mandatory is why I rarely report bugs for projects that use
 Bugzilla. I don't think making it harder for users to report problems is
 a good trade-off.

I totally agree on this. The easier we get our users to report bugs, the
hardest we get releases 0:-)

-- 
David Moreno Garza [EMAIL PROTECTED] | http://www.damog.net/
 Una vida sencilla para nada es aburrida.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-25 Thread Luis Matos
Qua, 2007-04-25 às 13:50 -0500, David Moreno Garza escreveu:
 Steve Greenland wrote:
  I'd guess that Bugzilla's mandatory registration is why. OTOH,
  Bugzilla's mandatory is why I rarely report bugs for projects that use
  Bugzilla. I don't think making it harder for users to report problems is
  a good trade-off.
 
 I totally agree on this. The easier we get our users to report bugs, the
 hardest we get releases 0:-)
 
So let's put a better filter in bugs.d.o for it to randomly reject 50%
of the accepted emails.

Maybe b.d.o can block the people that send RC bugs ... those persons are
rude ... send RC bugs elsewhere and don't spam BTS.

 -- 
 David Moreno Garza [EMAIL PROTECTED] | http://www.damog.net/
  Una vida sencilla para nada es aburrida.
 
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



spam from bugs.debian.org

2007-04-24 Thread Kamaraju S Kusumanchi
Of late, I have been seeing a lot of spam from bugs.debian.org . I never got
this many spam emails from BTS. Has something changed? How does everyone
deal with this (I mean other than filtering)?

hth
raju

-- 
Kamaraju S Kusumanchi
http://www.people.cornell.edu/pages/kk288/
http://malayamaarutham.blogspot.com/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: spam from bugs.debian.org

2007-04-24 Thread Frans Pop
On Wednesday 25 April 2007 06:04, Kamaraju S Kusumanchi wrote:
 Of late, I have been seeing a lot of spam from bugs.debian.org . I
 never got this many spam emails from BTS. Has something changed? How
 does everyone deal with this (I mean other than filtering)?

Yes, both the admins of the BTS and the Debian Listmasters are pretty 
active in dealing with this. Filters have been added and if you check the 
mailing list archives, you will see that most of the spam messages have 
been deleted.

The main problem is that these attacks were very focussed with a huge 
amount of messages in a short time.

Cheers,
Frans Pop
Listmaster


pgpowuZyaq7H8.pgp
Description: PGP signature