[Gllug] Killing capitalised spam from the list
Mark Lowes
hamster at korenwolf.net
Tue Jun 25 09:18:29 UTC 2002
On Mon, 2002-06-24 at 22:37, Nix wrote:
> On Mon, 24 Jun 2002, Adrian McMenamin uttered the following:
> > On Monday 24 Jun 2002 6:31 pm, FRANK UBU wrote:
> >> DELOTTO NETHERLANDS SWEEPSTAKES LOTTERY,
> >> BURDENSTRAAT 21B,
> >
> > And other such spam rubbish... is it possible to have a /. like lameness
> > filter that blasts posts with too many caps?
> SpamAssassin is tagging posts to the list[1], using substantially more
> complex rules than `too many caps' (although that's one of them).
Given a chance spamassassin tagged this one as heavily pork product
encased.
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Checker-Version: SpamAssassin 2.30 (devel $Id: SpamAssassin.pm,v
1.94 2002/06/14 23:17:15 hughescr Exp $)
X-Spam-Prev-Content-Transfer-Encoding: quoted-printable
X-Spam-Report: 8.5 hits, 5 required;
* 1.1 -- BODY: A word in all caps repeated on the line
* 2.3 -- BODY: Nigerian scam key phrase ($NN,NNN,NNN.NN)
* -0.0 -- BODY: A WHOLE LINE OF YELLING DETECTED
* 0.5 -- BODY: 3 WHOLE LINES OF YELLING DETECTED
* 0.1 -- BODY: 2 WHOLE LINES OF YELLING DETECTED
* 3.0 -- Listed in Razor, see http://razor.sourceforge.net/
* 1.5 -- 'From' yahoo.com does not match 'Received' headers
[...]
> [1] although oddly enough, that post didn't get tagged: I wonder if our
> holy hamster-mailadmin has any idea why it got missed?
> There have been posts on the spamassassin-talk mailing list about
> spamd missing posts at times: I haven't seen this behaviour, but
> I don't load my spamd much at all (personal mail only, a few an
> hour).
It looks like email was going to mx-3.mail which doesn't have the
'redirect to spamscan' director on it at the moment. Not normally a
problem as the email should hit mx-1 or mx-2, I'll be looking at this
because it's hit a couple of users within the last 24 hours.
However it's down the bottom of the list below the current crop of
security fun and games.
--
The Flying Hamster <hamster at korenwolf.net>
http://www.korenwolf.net/
"Life is a boomerang"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 192 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20020625/d261291c/attachment.pgp>
More information about the GLLUG
mailing list