[Gllug] Seeking For Help

[Stig Brautaset]

On Apr 07 2003, Pete wrote:
> On Mon, Apr 07, 2003 at 11:58:04AM +0100, Andrew Halliwell wrote:
> > And verily, didst Mr Simon Johnson announce to the hordes:
> > > DEAR SIR/MADAM,
> > 
> > Etc etc, sierra leone blah blah, millions of dollars blah blah...
> > 
> > How the FECK did this get past the spam assassin filters?
> 
> I've read somewhere that about 5 times as much traffic is generated by
> people talking about spam, as spam itself.

Yep. Probably much more on certain lists. When I used to hang on
debian-user, the problem became so bad that I hacked up a procmail
recipe to get rid of the bastards. Here it is, in its current form:

# If Bogofilter or SpamAssassin triggers, make sure we plonk followups 
# to the message too.
:0 
* 1^0 ^X-Bogosity: Yes, tests=bogofilter
* 1^0 ^X-Spam-Status: Yes
* 1^0 ? formail -c -x"References:" -x"In-Reply-To:" | fgrep -is -f $spam_ids
{
	# tag spam so we can stop followups to it
        :0 ch:
        | formail -x"Message-Id:" >> $spam_ids

        # if caught by bogofilter
        :0 :
        * ^X-Bogosity: Yes, tests=bogofilter
        $bogofilter

        # if caught by spamassassin
        :0 :
        * ^X-Spam-Status: Yes
        $spamassassin

        # if we get here then it was a followup to spam
        # Invaluable on e.g. debian-user.
        :0 :
        $followups
}




> > it must have at least 30 points worth of spamworthyness in the first 5
> > lines!
> 
> FWIW, it didn't get past my filters.

Neither mine. Nor did your reply to it, but I occasionally browse the spam
folders to see if there was any false positives. This happens a bit more often
than usual at the moment since I only recently installed bogofilter. 



Stig
-- 
brautaset.org

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug