Re: spam filter problem

2002-05-21 Thread James R. Van Zandt
Karl Runge writes: It is possible you have an oddly named file ^Subject: (ADV:) that contains those missing ~ 100 emails of yours. You're right! $ ls -l *Sub* -rw---1 jrv jrv 2555170 May 13 19:26 ^Subject: Thank you very much! - Jim Van Zandt

Re: spam filter problem

2002-05-20 Thread James R. Van Zandt
to be working. :0 H # foreign language junk mail * charset=.ks_c_5601-1987. Not sure about this one... what's the actual header line look like for this? \. is needed if you want to match a ., but.. I'm not familiar with the header you're going for.. Maybe a quarter of my spam

Re: spam filter problem

2002-05-20 Thread James R. Van Zandt
Rich Payne [EMAIL PROTECTED] writes: you may want to have a look at razor (http://razor.sourceforge.net/). It's a distributed SPAM checking system. I noticed this a while back, and it looks very interesting. However just the other day I read a comment at Slashdot that someone has been

Re: spam filter problem

2002-05-20 Thread Rich Payne
(http://razor.sourceforge.net/). It's a distributed SPAM checking system. I noticed this a while back, and it looks very interesting. However just the other day I read a comment at Slashdot that someone has been poisoning the razor database, so that it labeled some legitimate mailing

spam filter problem

2002-05-17 Thread James R. Van Zandt
I've been running a simple procmail filter to get rid of spam from some specific sites. The sample below only includes a few of the addresses, but even with the whole list it's no longer very effective. Last weekend I decided to tune it up to filter out more of the spam. I added the last three

Re: spam filter problem

2002-05-17 Thread Rich Payne
I have no idea what's wrong with this...however you may want to have a look at razor (http://razor.sourceforge.net/). It's a distributed SPAM checking system. Basically you don't have to worry about keeping a list of the senders etcyou just use procmail to pass all your mail through

Re: spam filter problem

2002-05-17 Thread Ben Boulanger
On Thu, 16 May 2002, James R. Van Zandt wrote: If someone has a non-risky way to test procmail rules, I'd appreciate hearing about it. Don't send to /dev/null at first, send to something you can get to with your mail reader - ~/mail/filtered or something usually works for me. :0 H

Re: spam filter problem

2002-05-17 Thread Mark Komarinski
I heartily recommend spamassassin. It used a variety of weightings to see if the mail you have is spam. For example, if the mail is listed in Razor, it's worth 2 points, and if it came from a site listed in one of the RBLs, it's worth a few points, and so on. You can configure the weighting

Re: spam filter problem

2002-05-17 Thread Cole Tuininga
On Fri, 2002-05-17 at 12:51, Mark Komarinski wrote: I heartily recommend spamassassin. It used a variety of weightings to see if the mail you have is spam. For example, if the mail is listed in Razor, it's worth 2 points, and if it came from a site listed in one of the RBLs, it's worth

Nore on spam

2002-03-13 Thread Mark Komarinski
I had an interesting thought today, but it's a real strange one, so follow along: Most spam shows up with bad headers like the From: line saying [EMAIL PROTECTED]. Is there any way for an MTA to reverse-VRFY a sending account before allowing the communication to continue? I know a lot of mail

Nore on spam

2002-03-13 Thread Bayard Coolidge USG
is valid? If it's valid, it comes through. If not *wham* gets immediately flagged as spam and goes to an alternate box or whatever. It takes but a few minutes to obtain an account on Yahoo or the other major web mail systems. So, once the spammer does that, it then sends out the spam from

Re: Nore on spam

2002-03-13 Thread Ed Robbins
the communication to continue? I know a lot of mail systems disable VRFY, since it allows a spammer to find out who is there, but that's pretty much dead anyway since a VRFY can be abused for more than just spam. For instance, it can provide hints as to what login names exist, to facilitate break-ins

Re: Nore on spam

2002-03-13 Thread Paul Iadonisi
On Wed, Mar 13, 2002 at 11:13:07AM -0500, Mark Komarinski wrote: I had an interesting thought today, but it's a real strange one, so follow along: Most spam shows up with bad headers like the From: line saying [EMAIL PROTECTED]. Is there any way for an MTA to reverse-VRFY a sending

Re: Nore on spam

2002-03-13 Thread Paul Lussier
weighting of e-mail. If an e-mail scores some number of points, it's counted as spam, and redirected to a folder of your choosing (/dev/null *is* a valid folder :) There's also 'ifile' mentioned here the other day by Tom Buskey. I started looking at it yesterday, but got distracted with my

Re: More spam discussion

2002-03-12 Thread Bayard Coolidge USG
Tom Buskey [EMAIL PROTECTED] said, among other things: Combine that with procmail you can filter lots of it to a spam folder. Add ifile it will watch how you refile messages in exmh/MH and will learn how you do it. Then much of the spam will be refiled by ifile into your spam folder

Re: More spam discussion

2002-03-11 Thread Bayard Coolidge USG
the abstracts of the new mail listed on the screen before I actually open an individual e-mail. This morning, I had 54 new mail messages, 8 of which were spam. I was able to use a separate xterm window to cd into my 'inbox' directory, do an 'rm' of the offending messages, and then tell exmh to 'rescan folder

Re: More spam discussion

2002-03-11 Thread Rodent of Unusual Size
I spent the week-end getting SpamAssassin set up and working on my behalf. FWIW, I updated my description of the process: URL:http://Ken.Coar.Org/musings/spam-fighting.html. Just in time; last night I received more than 800 spam messages. (!) -- #kenP-)} Ken Coar, Sanagendamgagwedweinini

Re: More spam discussion

2002-03-11 Thread Paul Lussier
In a message dated: Mon, 11 Mar 2002 09:04:45 EST Bayard Coolidge USG said: This morning, I had 54 new mail messages, 8 of which were spam. I was able to use a separate xterm window to cd into my 'inbox' directory, do an 'rm' of the offending messages, and then tell exmh to 'rescan folder'. I

Re: More spam discussion

2002-03-11 Thread Ed Robbins
Has anyone given a talk on Spam control? I've been fighting it for several months now and I'm finally making some headway. Of course, I run my own mail server so I have a lot more control over what I can do. I started with access databases within sendmail and kept spam domains and email

Spam Control

2002-03-11 Thread Ed Robbins
Paul, I tried to return your email, but I get a response back from mindspring saying your an unknown user. I would be interested in speaking, I'm no expert but I can certianly share my experiences. What are the dates of the April and May meetings? Ed

Re: More spam discussion

2002-03-11 Thread jkinz
At 02:57 PM 3/11/2002 -0500, Ed Robbins wrote: Has anyone given a talk on Spam control? I've been fighting it for several months now and I'm finally making some headway. Of course, I run my own mail server so I have a lot more control over what I can do. I started with access databases

Re: More spam discussion

2002-03-11 Thread Tom Buskey
Exchange. One of the nice parts about exmh, from an end-user perspective, is the ability to have the abstracts of the new mail listed on the screen before I actually open an individual e-mail. This morning, I had 54 new mail messages, 8 of which were spam. I was able to use a separate xterm window to cd

Re: More spam discussion

2002-03-10 Thread Paul Iadonisi
Although I still am strongly against open relays, something did just occur to me. I think my ISP sysadmin actually said this, but even if he didn't it's still an open question. What about secondary MX services? When a provider offers secondary MX, as my home DSL provider does, it is now

Re: More spam discussion

2002-03-10 Thread Paul Iadonisi
On Sun, Mar 10, 2002 at 01:36:39PM -0800, Karl J. Runge wrote: Boy, now I am really confused about what you are trying to accomplish... Me too. ;-) Yes, mail is a store and forward model, and so can originate from anywhere. Perhaps you can provide some simple examples of what you want to

Re: More spam discussion

2002-03-10 Thread Derek D. Martin
will not really eliminate the problem. All it will do is cause spammers to have their own Linux box running sendmail that will allow them to send their spam. Or become otherwise more resourceful. What eliminating open relays really does is make it easier to find out where the spam is really coming from

Re: More spam discussion

2002-03-10 Thread Paul Iadonisi
. All it will do is cause spammers to have their own Linux box running sendmail that will allow them to send their spam. Or become otherwise more resourceful. What eliminating open relays really does is make it easier to find out where the spam is really coming from, and go after the bastards

More spam discussion

2002-03-08 Thread Paul Iadonisi
I have a problem. This message is likely to cause some tempers to flare. But I'm getting utterly pissed off about spam. Not just annoyed, but pissed off so much, that I'm not sure what to do with the anger. You see, I manage the small infrastructure for what is to be an ASP. We have only

Re: More spam discussion

2002-03-08 Thread Ken D'Ambrosio
on vacation, it's the people that go inside and *take* stuff. I mean, duh. An open relay is simply inexcusable in this day and age. 10, 15 years ago, when spam was essentially unknown (I remember my first spam -- a racist screed to all WELL members, sometime in '92 or so), maybe. Nowadays

Re: More spam discussion

2002-03-08 Thread Paul Iadonisi
On Fri, Mar 08, 2002 at 07:13:05PM -0500, Ken D'Ambrosio wrote: On Fri, 2002-03-08 at 18:57, Paul Iadonisi wrote: [snip] Time to dump 'em, and let us know who they are. I thought I'ld get some confirmation on this list. Let the opinions keep pouring in, though. I think I have a good idea

Re: More spam discussion

2002-03-08 Thread Rich Payne
One the subject of SPAM I installed razor the other day (razor.sourceforge.net), it's basically a distributed SPAM identification system. Using procmail you feed each message through razor-check. It creates some unique ID on the message (MD5 sum or some such) and compares it against the DB

Re: More spam discussion

2002-03-08 Thread Benjamin Scott
offensive content, cause too much trouble, or just because they don't like your face. It is their right. It is their network, not yours. You are, of course, free to go to their competition. But if their competition all have similar requirements (not being a spam-source, for example), you may

Spam via sourceforge???

2002-02-01 Thread Jack Hodgson
I got a spam last night that appeared to be addressed to myusername@users.sourceforge.net I've only registered at sourceforge recently, so maybe this happens alot, but two things: 1. I didn't know that an email address came with the registration, and, 2. Hey! How'd the spammer get

Re: Spam via sourceforge???

2002-02-01 Thread Derek D. Martin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At some point hitherto, Jack Hodgson hath spake thusly: I got a spam last night that appeared to be addressed to myusername@users.sourceforge.net I've only registered at sourceforge recently, so maybe this happens alot, but two things

Re: SPAM??

2002-01-10 Thread Bayard Coolidge USG
I've forwarded the offending message to Mark Gelinas, so give him a little while to look into it for us, and work the issue with our sys admins here. Your patience is appreciated. Bayard --- Bayard R. Coolidge N1HO

Re: SPAM??

2002-01-10 Thread Michael O'Donnell
I've forwarded the offending message to Mark Gelinas, so give him a little while to look into it for us, and work the issue with our sys admins here. Your patience is appreciated. I can normally look at the headers of a SPAM message and see where the chain of trust was broken

SPAM??

2002-01-09 Thread Kenneth E. Lussier
Uh, I thought that this was already delt with? I thought that we went subscriber-only a long time ago [EMAIL PROTECTED] wrote: This email message is sent in compliance with the 106th Congress

please excuse the SPAM...testing sendmail

2000-05-22 Thread Chuck MacKinnon
Unfortunately I needed to send this due to the fact that I had to change my sendmail since switching to my DSL line. I had a normal looking hostname with my MediaOne account. Now I get this weird one. But I hope it reverses. If not then the apology is not necessary since you will not even see