Anti-spam techniques have evolved quite a bit beyond what SIMS can do. I have been trying out Communigate on OS X with SpamAssassin. I have created few header rules to check some custom RBL's.

<http://au.spamassassin.org/lists.html>

also a good list to join is the Commungate mailing list

<[EMAIL PROTECTED]>

Gary Robinson's Rants: Spam filtering: Training to Exhaustion
<http://www.garyrobinson.net/2004/02/spam_filtering_.html>

here is one of the spam's that SpamAssassin marked up:

Subject: SPAM? * * Contact me soon
X-Spam-Status: Yes, hits=18.1 required=5.9 tests=BAYES_80,DATE_IN_PAST_06_12, DEAR_SOMETHING,FORGED_MUA_OUTLOOK,NIGERIAN_BODY1,NIGERIAN_BODY2, NIGERIAN_BODY3,OPPORTUNITY,RATWARE_OE_MALFORMED,RCVD_IN_BL_SPAMCOP_NET, RISK_FREE,UPPERCASE_75_100,US_DOLLARS_3 autolearn=spam version=2.63



Content analysis details: (18.1 points, 5.9 required)


pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RATWARE_OE_MALFORMED X-Mailer has malformed Outlook Express version
2.3 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.5 RISK_FREE BODY: Risk free. Suuurreeee....
0.7 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.1 OPPORTUNITY BODY: Gives information about an opportunity
1.7 BAYES_80 BODY: Bayesian spam probability is 80 to 90%
[score: 0.8680]
0.7 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?195.219.176.50>]
0.7 NIGERIAN_BODY2 Message body looks like a Nigerian spam message 2+
2.0 NIGERIAN_BODY1 Message body looks like a Nigerian spam message 1+
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.7 NIGERIAN_BODY3 Message body looks like a Nigerian spam message 3+
2.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook



On Thursday, February 5, 2004, at 06:51 PM, Tod Fitch wrote:


X-Original-Message-Id: <[EMAIL PROTECTED]>
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on Music-Computer.local.
X-Spam-Level:
X-Spam-Status: No, hits=-4.9 required=5.9 tests=BAYES_00 autolearn=ham version=2.63


Thank you Michael for that note.

My question is not really what to do today but rather where I will be able to find tips and information in the future: Anti-spam techniques have changed quite a bit in the last few years and I expect that the "state of the art" will continue to change. I have noticed on a number of occasions that Bill Cole seems to knowledgeable on evolving techniques and thus thought he might know of places that I, or other small server administrators, can go to keep up to date.

The SIMS discussion list has served this purpose for me in the past and, to some extent, still does so today. However the volume of information carried on this channel is steadily declining and I expect it to no longer be useful in the near future. I want to be prepared for that and so my question:

Where can I go to keep up to date on mail server administration?

Thanks,
Tod

On Feb 5, 2004, at 4:34 PM, Michael wrote:

Hi Tod,

I have been running SpamAssassin on a unix box for about 2 months. It has been great - I am just using it to tag mail (about 98% correct).

Michael

On Thursday, February 5, 2004, at 06:29 PM, Tod Fitch wrote:


Do you have any recommendations about web discussion forums or email lists that I can subscribe to that will provide the type of anti-spam information that I have been able to get from the SIMS mailing list?


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>



Reply via email to