From owner-freebsd-questions@FreeBSD.ORG Fri Aug 24 03:17:54 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 57C5816A417 for ; Fri, 24 Aug 2007 03:17:54 +0000 (UTC) (envelope-from freebsd@meijome.net) Received: from sigma.octantis.com.au (ns2.octantis.com.au [207.44.189.124]) by mx1.freebsd.org (Postfix) with ESMTP id 1E6E413C457 for ; Fri, 24 Aug 2007 03:17:53 +0000 (UTC) (envelope-from freebsd@meijome.net) Received: (qmail 14608 invoked from network); 23 Aug 2007 22:17:54 -0500 Received: from 124-170-56-192.dyn.iinet.net.au (HELO localhost) (124.170.56.192) by sigma.octantis.com.au with (DHE-RSA-AES256-SHA encrypted) SMTP; 23 Aug 2007 22:17:53 -0500 Date: Fri, 24 Aug 2007 13:17:48 +1000 From: Norberto Meijome To: Gary Kline Message-ID: <20070824131748.1b203477@localhost> In-Reply-To: <20070823231906.GA46832@thought.org> References: <87r6lumboh.fsf@thingy.datadok.no> <20070823195015.GA45853@thought.org> <87mywilzxt.fsf@thingy.datadok.no> <20070823231906.GA46832@thought.org> X-Mailer: Claws Mail 2.10.0 (GTK+ 2.10.14; i386-portbld-freebsd6.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: "Peter N. M. Hansteen" , freebsd-questions@freebsd.org Subject: Re: spammers harvesting emaill address from this list X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Aug 2007 03:17:54 -0000 On Thu, 23 Aug 2007 16:19:06 -0700 Gary Kline wrote: > Would it > be possible to filter on both the ^Subject: "A friend has sent you > a Greeting card!" as well as the body? HTML or plaintext? As > soon as I see one (usually different) spam I know there well be > several other similar or identical messages. How difficult would > it be to flag spam on "you" "sent" "greeting card", for example? > > Plus the hundreds of variations on "Are you enough of a man?" > and the ones for some kind of pills? Or home loans at 5.1%!!! > (*mumble*) Hi Gary et al, rather than filtering on one by one basis, why not just setup your mail server to do the whole job for you, using spamassassin (or your other anti-spam software), with dynamic filters ( like razor and DCC (i think it's called) ). I have (cheking...) about 7 *active* email address in my mail client, subscribed to many mailing lists (12 of those @freebsd.org). Some of those email addresses are used in contact details of many domain registrations. All of them behind similarly configured servers. I have all the spam tagged and moved to Trash on sight. Out of all the email I receive (which usually is several hundred / day), I may have to manually delete 10 spam , uncaught emails (all up). I haven't so far found out about a false positive in several years of using this setup. I may be lucky enough that I have a couple of Mbps of bandwidth @ home to handle my email load, but none of the tools I use are commercial, and they are VERY well documented. BTW, that ratio is far smaller than the amount of tree-based spam I get on my home mailbox each day. I also have a catch-all email address to see what comes my way - i see higher number of uncaught spam there (which then goes to feed my Bayes filters), so i doubt that blaming @freebsd.org servers has anything to do with receiving more spam. In summary, the trick as always is to properly use the tools at hand. regards, B _________________________ {Beto|Norberto|Numard} Meijome We've been wrong so many times before, why stop now? I speak for myself, not my employer. Contents may be hot. Slippery when wet. Reading disclaimers makes you go blind. Writing them is worse. You have been Warned.