Hello
Monday, August 14, 2000, 5:50:58 PM, you wrote:
SL> -----BEGIN PGP SIGNED MESSAGE-----
SL> Hash: SHA1
SL> Once again the question of effective filtering of spam has come up and
SL> once again people have made suggestions which simply do not work. A "bozo
SL> bin" doesn't work because spammers most likely move to a different address
SL> before you even check your mail and read the message. All they do is provide
SL> an extra filter that needs to be run and virtually nil chance of catching
SL> anyone.
SL> Filters on subjects or on pseudo-techincal means also fail because they
SL> generate false positives, are ineffective (maake monie know!), and can block
SL> legit users for dubious return.
SL> So, without futher buildup, here's the system that I put to this list back
SL> in January. Let me know that in that time I had instituted that filter on my
SL> home account and was catching 2-3 spam a day and cannot recall a single
SL> positive hit /aside/ from when I started a new list and hadn't gotten a
SL> message in from it yet to set up the filtering.
SL> In another message in a related thread I noted that I had once figured out
SL> hit hit/miss/false positive hit ratio on my mail. Something like 99.95% hit,
SL> .001% false positive with the remainder, .049%, being spam getting through to
SL> my inbox. That was over several years of using that system on PMMail on an
SL> account that was spammed heavily and on which I got in excess of 500 messages
SL> per day.
SL> Frankly, this should be a FAQ.
SL> ===================Original message text===============
SL> From: Steve Lamb <[EMAIL PROTECTED]>
SL> To: Fred Weissman <[EMAIL PROTECTED]>
SL> Date: Monday, January 10, 2000, 11:10:57 AM
SL> Subject: TheBat and Spam
SL> Monday, January 10, 2000, 9:57:35 AM, Fred wrote:
>> little while. Today, this quote caught my eye. Can you tell me about
>> your spam system? Where can I find the specifics for it? Will it in
>> fact do what tracer asks (i.e. dump mail which has sender=receiver)?
SL> No, it doesn't do that. However, it doesn't have to. Allie recently sent
SL> a message out that described it so you might have it. If not, here's the
SL> short version.
SL> The two basic premises are this:
SL> 1: Nearly every spammer BCCs.
SL> 2: People get mail from two sources, directly addressed to them from
SL> individuals they know or mass mailed (BCC) mailing lists they signed up for.
SL> Instead of trying to filter spam, we're going to define a set of rules to
SL> filter everything but spam.
SL> So, we set up a series of filters. The first batch filters out all the
SL> mailing lists that the individual is on. Most people do this anyway. Once
SL> they filter it, it stops.
SL> The second series of filters catches mail from individuals who /may/ BCC
SL> the person. Friends, family, loved ones, work colleagues, etc.
SL> The next to last filter stops filtering on anything which is directly
SL> addressed to the individual.
SL> The last filter moves everything that wasn't caught by the above filters
SL> into a spam folder for the person to double check for something that might
SL> have been missed and final deletion.
SL> Another way to put it is like this... If it isn't a mailing list, from
SL> friends/relatives or directly addressed to you, chances are high that it is
SL> spam.
SL> In tracer's case, if sender = recipient chances are it isn't on a mailing
SL> list he is on, it isn't from someone he expects to BCC him, and, clearly, it
SL> isn't from him. It will be filtered.
SL> - --
SL> Steve C. Lamb | I'm your priest, I'm your shrink, I'm your
SL> ICQ: 5107343 | main connection to the switchboard of souls.
SL> - -------------------------------+---------------------------------------------
SL> ================End of original message text===========
SL> - --
SL> Steve C. Lamb | I'm your priest, I'm your shrink, I'm your
SL> ICQ: 5107343 | main connection to the switchboard of souls.
SL> - -------------------------------+---------------------------------------------
SL> -----BEGIN PGP SIGNATURE-----
SL> Version: PGP 6.5i
SL> iQA/AwUBOZek4npf7K2LbpnFEQLgvwCgk631yX18d3rCX+0DPSCIAaL9Q3AAnjrR
SL> 9SLSmd7ItKy3Bz3XDMmDFXpF
SL> =yOhM
SL> -----END PGP SIGNATURE-----
Steve my Shrink,
For the computer challenged amongst us (present company excepted of
course <g>), can you post a copy of these filters? Thanks.
--
Regards
John Phillips [EMAIL PROTECTED]
--
--------------------------------------------------------------
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
<mailto:[EMAIL PROTECTED]>
To Unsubscribe from TBUDL, double click here and send the message:
<mailto:[EMAIL PROTECTED]>
--------------------------------------------------------------
You are subscribed as : [email protected]
