[Gllug] Killing capitalised spam from the list

[Mark Lowes]

On Mon, 2002-06-24 at 22:37, Nix wrote:
> On Mon, 24 Jun 2002, Adrian McMenamin uttered the following:
> > On Monday 24 Jun 2002 6:31 pm, FRANK UBU wrote:
> >>     DELOTTO NETHERLANDS SWEEPSTAKES LOTTERY,
> >>                   BURDENSTRAAT 21B,
> > 
> > And other such spam rubbish... is it possible to have a /. like lameness 
> > filter that blasts posts with too many caps?
> SpamAssassin is tagging posts to the list[1], using substantially more
> complex rules than `too many caps' (although that's one of them).

Given a chance spamassassin tagged this one as heavily pork product
encased.

X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Checker-Version: SpamAssassin 2.30 (devel $Id: SpamAssassin.pm,v
1.94 2002/06/14 23:17:15 hughescr Exp $)
X-Spam-Prev-Content-Transfer-Encoding: quoted-printable
X-Spam-Report:   8.5 hits, 5 required;
  *  1.1 -- BODY: A word in all caps repeated on the line
  *  2.3 -- BODY: Nigerian scam key phrase ($NN,NNN,NNN.NN)
  * -0.0 -- BODY: A WHOLE LINE OF YELLING DETECTED
  *  0.5 -- BODY: 3 WHOLE LINES OF YELLING DETECTED
  *  0.1 -- BODY: 2 WHOLE LINES OF YELLING DETECTED
  *  3.0 -- Listed in Razor, see http://razor.sourceforge.net/
  *  1.5 -- 'From' yahoo.com does not match 'Received' headers

[...]
> [1] although oddly enough, that post didn't get tagged: I wonder if our
>     holy hamster-mailadmin has any idea why it got missed?
>     There have been posts on the spamassassin-talk mailing list about
>     spamd missing posts at times: I haven't seen this behaviour, but
>     I don't load my spamd much at all (personal mail only, a few an
>     hour).

It looks like email was going to mx-3.mail which doesn't have the
'redirect to spamscan' director on it at the moment.  Not normally a
problem as the email should hit mx-1 or mx-2, I'll be looking at this
because it's hit a couple of users within the last 24 hours.

However it's down the bottom of the list below the current crop of
security fun and games.

-- 
The Flying Hamster <hamster at korenwolf.net>     
http://www.korenwolf.net/
"Life is a boomerang"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 192 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20020625/d261291c/attachment.pgp>