Spam getting out of hands

from Hugo Haas <[email protected]>, Wed, 3 Apr 2002 11:10:17 -0500

Replies:

Parents:

  • None.
This morning, I received spam from Joseph's address[1]. While I had
heard about header forging for spam, I had never received one. Now
that I have, I am furious:
- they are using other people's identity.
- my whitelist filtering ("Woohoo, no more spam in my inbox, ever!" --
 Gerald Oskoboiny, 18 Dec 2000[2]) is useless.
- I cannot reliably filter such emails.

I am thinking of doing the following:
- start PGP-signing all my emails: people will be able to reliably
 filter emails coming from me.
 That won't solve the problem though, unless I can convince the whole
 world to do the same.
 Still, I am thinking about doing it, and writing tools to have a
 PGP-enabled whitelist.
- sue, or otherwise annoy (calling the CEO, etc), the spammers who
 will use my identity. I am not sure how to do that though and how
 successful I will be.

It seems that there is no immediate nor easy technological answer, and
no easy legal action either.

I would like to know what others intend to do.

If we can get a pool of people PGP-signing email, we might be able to
get more by explaining the benefits. Somehow I doubt that it will
happen, but I guess that PGP-signing mine will at least make me feel
better.

 1. http://lists.w3.org/Archives/Public/spec-prod/2002AprJun/0001.html
 2. http://impressive.net/archives/fogo/[email protected]
--
Hugo Haas <[email protected]> - http://larve.net/people/hugo/
- I'd really like to give it a try. - I don't know Marge, trying is the
first step towards failure. -- Homer J. Simpson

Re: Spam getting out of hands

from Hugo Haas <[email protected]>, Wed, 3 Apr 2002 11:21:32 -0500

Replies:

Parents:

* Hugo Haas <[email protected]> [2002-04-03 11:10-0500]
> I am thinking of doing the following:
[..]
> - sue, or otherwise annoy (calling the CEO, etc), the spammers who
>   will use my identity. I am not sure how to do that though and how
>   successful I will be.

Since a fake email from Danbri just get through my whitelist, I just
called them (407-539-0615) to complain about them taking people's
identity.

Their answer was that I didn't know what I was talking about, that I
should get a clue and then they hung up on me...

Hmmm... I am somewhat frustrated.

--
Hugo Haas <[email protected]> - http://larve.net/people/hugo/
Shut up, brain, or I'll stab you with a Q-tip! -- Homer J. Simpson

Re: Spam getting out of hands

from "Ian B. Jacobs" <[email protected]>, Wed, 03 Apr 2002 12:21:58 -0500

Replies:

Parents:

Hugo Haas wrote:

> * Hugo Haas <[email protected]> [2002-04-03 11:10-0500]
>
>>I am thinking of doing the following:
>>
> [..]
>
>>- sue, or otherwise annoy (calling the CEO, etc), the spammers who
>>  will use my identity. I am not sure how to do that though and how
>>  successful I will be.
>>
>
> Since a fake email from Danbri just get through my whitelist, I just
> called them (407-539-0615) to complain about them taking people's
> identity.
>
> Their answer was that I didn't know what I was talking about, that I
> should get a clue and then they hung up on me...


I called the number to find out more. I just hung up from a
fascinating 45-minute call with a very helpful person.

The "good news" is that the guy I talked to said he would have
w3.org removedfrom their database.

Q: Is this illegal?

A: He didn't think so, at least in the US.
   Here's one case in the state of New York where an affiliate
   of the company who sent the spam sued an ISP because the ISP
   wanted to terminate their contract. The ISP lost; see [1].

   [1] http://www.computertimes.com/jul01internetnews.htm#newyork

   More info about the case:
     http://litigation.paetec.net/casedocs.html

Q: Isn't this unethical?

A: The gentleman I spoke to clearly didn't
   think it was, stating that he has the right to knock on my
   door and I have the right to turn him away.

   I didn't purse the ethical issues because their attitude
   was "As long as it's legal and we can make money doing it
   and someone else is going to do this, we're not going to
   worry about ethics."

Q: What can I do about this?

A:

   - The "nice" spammers will remove you from their lists; it's
     not in their business interest to sell lists of email
     addresses of people who don't want spam.

   - Filter what you can and delete the rest.

   - In the future, companies will exchange remove lists and
     spam will go down.

Q: How do you do this?

A:

 - We figure out what version of procmail you're using and
   that tells us, for example, that your mail server will
   accept mail from within the same domain (or forged to
   look that way).

 - We get email addresses by using binomial combinatorials,
   figuring out which email addresses are recognized, and
   then tucking them away for later.

This company makes 3.6 million dollars/year doing this
and they are not going to stop any time soon.

 - Ian
--
Ian Jacobs ([email protected])   http://www.w3.org/People/Jacobs
Tel:                     +1 718 260-9447

Re: Spam getting out of hands

from Joseph Reagle <[email protected]>, Wed, 3 Apr 2002 13:57:54 -0500

Replies:

Parents:

On Wednesday 03 April 2002 12:21, Ian B. Jacobs wrote:
> Q: Is this illegal?
>
> A: He didn't think so, at least in the US.
>     Here's one case in the state of New York where an affiliate
>     of the company who sent the spam sued an ISP because the ISP
>     wanted to terminate their contract. The ISP lost; see [1].

That's nonsense. Spammer's frequently cite irrelevant cases and old House
and Senate resolutions that were never passed. (They do so and even violate
that which they are citing!) On a quick read, that case involved a contract
between the UCE entity and its ISP; the dispute revolved around whether the
terms of the ISP's service were violated (was there email truly
unsolicited?) such that the contract can be terminated. AND the judge
hasn't issued its ruling yet!

Our assholes are purposefully forging headers and From addresses to send
unsolicited email. In fact, their service is intended to make it very
difficult for an ISP to take an action against such a spammer, "Forget
problems with ISP 's your IP address will never be shown in our e-mail
headers." This is definitely against the law in some US states [a]. I'm not
sure if its against the law under Federal or Massachusetts law but I have
contacted and spoken with the FTC and the Middlesex's District Attorney's
Special Investigations (Computer) Investigator. The FTC doesn't speak about
any pending actions (they are so weak the typical result is a consent
degree that does not constitute an admission of guilt) so it's hard to say
if they would take any action. (They typically need to receive lots of
complaints.) I hope to hear back from the Middlesex DA or Massachusetts GA
as to whether this is presently violating any local laws.

Ian, did you find out which state they are based in? If we were lucky,
they'd do it to Janet and she could get some money out of them [b].

[a] http://spamlaws.com/state/summary.html
[b] http://www.woodyswatch.com/windows/archtemplate.asp?4-13#watchdog

--

Regards,          http://www.mit.edu/~reagle/
Joseph Reagle     E0 D5 B2 05 B6 12 DA 65  BE 4D E3 C1 6A 66 25 4E

* This email is from an independent academic account and is
 not necessarily representative of my affiliations.

Re: Spam getting out of hands

from Ted Guild <[email protected]>, 04 Apr 2002 08:33:57 -0500

Replies:

  • None.

Parents:

Joseph Reagle <[email protected]> writes:

> On Wednesday 03 April 2002 12:21, Ian B. Jacobs wrote:
> > Q: Is this illegal?
> >
> > A: He didn't think so, at least in the US.
[]
> Our assholes are purposefully forging headers and From addresses to send
> unsolicited email. In fact, their service is intended to make it very
> difficult for an ISP to take an action against such a spammer, "Forget
> problems with ISP 's your IP address will never be shown in our e-mail
> headers." This is definitely against the law in some US states [a]. I'm not
> sure if its against the law under Federal or Massachusetts law but I have
> contacted and spoken with the FTC and the Middlesex's District Attorney's
> Special Investigations (Computer) Investigator. The FTC doesn't speak about
> any pending actions (they are so weak the typical result is a consent
> degree that does not constitute an admission of guilt) so it's hard to say
> if they would take any action. (They typically need to receive lots of
> complaints.) I hope to hear back from the Middlesex DA or Massachusetts GA
> as to whether this is presently violating any local laws.
>
> Ian, did you find out which state they are based in? If we were lucky,
> they'd do it to Janet and she could get some money out of them [b].

The State of Maine (where I reside) has been bouncing around some new
legislation ideas concerning spam [c].

Basically the law would be that they [spammers] would have to include
Adv in subject line and a valid email address or website link in the
message.  Pretty weak to begin with but was sailing along fine until
some clown started mucking with it making it less effective.  One of
the reasons he cites is how other states' legislation has been
ineffective and Maine should wait for the US government to address
it.

A more effective law would require no forged headers and a valid From
or Reply-to in addition to Adv, that way I could filter out and
automatically return fire to those that actually comply or comtemplate
suing those that don't if the return volley bounces.  I actually know
a few people in the Maine legislature and am tempted to offer consult
them but figure they probably have too many people involved to begin
with.

I would be surprised if Congress were to pass something useful in a
timely manner as they have flailed to date.  They should have the fore
sight of spammers going multinational and making the end customer
who's site is being advertised legally and therefore also financially
responsible for the tactics the spamming company they are employing
are using regardless of the country of origin of the spam.

I do have to agree that the various state laws have not served as much
of a deterent given the ongoing volume and practices.  Yes there have
been a few people like in the article Joseph cites that have been a
small nuisance to spammers.  It won't be until significant numbers of
people or class action law suits are started that there will be an
economic decision to comply with commercial email laws.  EU or US may
someday actually figure out how and when to properly legislate items
relating to the internet, their track records so far are pretty
muttled.  

> [a] http://spamlaws.com/state/summary.html
> [b] http://www.woodyswatch.com/windows/archtemplate.asp?4-13#watchdog

[c] http://www.portland.com/news/statehouse/020402spam.shtml

--
Ted Guild <[email protected]>
http://www.guilds.net

Re: Spam getting out of hands

from Gerald Oskoboiny <[email protected]>, Wed, 3 Apr 2002 11:43:35 -0500

Replies:

  • None.

Parents:

On Wed, Apr 03, 2002 at 11:10:17AM -0500, Hugo Haas wrote:
> This morning, I received spam from Joseph's address[1]. While I had
> heard about header forging for spam, I had never received one. Now
> that I have, I am furious:
> - they are using other people's identity.
> - my whitelist filtering ("Woohoo, no more spam in my inbox, ever!" --
>   Gerald Oskoboiny, 18 Dec 2000[2]) is useless.
> - I cannot reliably filter such emails.

Yeah, that sucks. I have received a few of those too.

> I am thinking of doing the following:
> - start PGP-signing all my emails: people will be able to reliably
>   filter emails coming from me.
>   That won't solve the problem though, unless I can convince the whole
>   world to do the same.
>   Still, I am thinking about doing it, and writing tools to have a
>   PGP-enabled whitelist.

I'd like to start doing that, but like you say I'm not sure at
what point it will become useful.

> - sue, or otherwise annoy (calling the CEO, etc), the spammers who
>   will use my identity. I am not sure how to do that though and how
>   successful I will be.

Trying to track down spammers generally seems like a waste of
time to me, but I hope other people do it :) I guess it can be
stress-relieving to flame someone once in a while.

> It seems that there is no immediate nor easy technological answer, and
> no easy legal action either.

How about: start doing whitelists of the relays that transmit
mail to your site instead of (or in addition to) From: lines.
In the case of your email, I would whitelist tux.w3.org, and for
mine you would do un.impressive.net.

For spam to w3.org email lists with forged w3.org From: lines, we
could add a filter to our hub to only accept mail with w3.org From:
lines if they come from a set of officially blessed relays.

>   1. http://lists.w3.org/Archives/Public/spec-prod/2002AprJun/0001.html
>   2. http://impressive.net/archives/fogo/[email protected]

--
Gerald Oskoboiny <[email protected]>
http://impressive.net/people/gerald/

Re: Spam getting out of hands

from Yves Lafon <[email protected]>, Wed, 3 Apr 2002 18:46:27 +0200 (MET DST)

Replies:

Parents:

On Wed, 3 Apr 2002, Hugo Haas wrote:

> This morning, I received spam from Joseph's address[1]. While I had
> heard about header forging for spam, I had never received one. Now
> that I have, I am furious:
> - they are using other people's identity.

In france, it is forbidden to send an email impersonating someone else,
same as it is forbidden to read email sent to someone else than you.

> - my whitelist filtering ("Woohoo, no more spam in my inbox, ever!" --
>   Gerald Oskoboiny, 18 Dec 2000[2]) is useless.
> - I cannot reliably filter such emails.

I am using only keyword-in-body based spam filter, the list is quite huge
(~400 lines), and most of the spam gets into it.
Of course nothing is fool-proof, but spammers are somehow predictable in
what they want to sell ;)

--
~~Yves

Re: Spam getting out of hands

from Pierre Baillet <[email protected]>, Wed, 3 Apr 2002 18:49:32 +0200

Replies:

Parents:

Hi there,


On Wed, Apr 03, 2002, Yves Lafon wrote:
>
> I am using only keyword-in-body based spam filter, the list is quite huge
> (~400 lines), and most of the spam gets into it.
> Of course nothing is fool-proof, but spammers are somehow predictable in
> what they want to sell ;)
>

Could it be possible to have a look at it for educationnal purpose ?

Cheers,
--
Pierre Baillet
             Linux is user friendly. Linux is not idiot friendly
                  If you don't understand that, use Windows

Re: Spam getting out of hands

from Yves Lafon <[email protected]>, Wed, 3 Apr 2002 18:57:47 +0200 (MET DST)

Replies:

  • None.

Parents:

 This message is in MIME format.  The first part should be readable text,
 while the remaining parts are likely unreadable without MIME-aware tools.
 Send mail to [email protected] for more info.

---559023410-684387517-1017853067=:22524
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Wed, 3 Apr 2002, Pierre Baillet wrote:

> Could it be possible to have a look at it for educationnal purpose ?

in .procmailrc:

SPAMBOX=$HOME/mail/INBOX-spam
LINEBUF=16384

#---------------------------------------- keep only one mail in case of duplica
:0Wh:msgid.lock
|/usr/local/bin/formail -D 32768 msgid.cache

INCLUDERC=$HOME/.procm/yves

The rule is attached in this email, it is automagically generated by a sed
script (well, sed + sort + uniq)

--
~~Yves

---559023410-684387517-1017853067=:22524
Content-Type: TEXT/PLAIN; charset=ISO-8859-1; name=yves
Content-Transfer-Encoding: BASE64
Content-ID: <[email protected]>
Content-Description:
Content-Disposition: attachment; filename=yves
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---559023410-684387517-1017853067=:22524--

Re: Spam filters

from Hugo Haas <[email protected]>, Mon, 15 Apr 2002 18:13:01 -0400

Replies:

Parents:

* Hugo Haas <[email protected]> [2001-01-27 19:49-0500]
> I have finally switched from Junkfilter[1] to whitelist based
> filtering.
[..]

* Hugo Haas <[email protected]> [2002-04-03 11:10-0500]
[..]
> It seems that there is no immediate nor easy technological answer, and
> no easy legal action either.

I have changed my spam filtering techniques taking into account the
new type of spam. I talked to Max who started using SpamAssassin[2]
and was happy about it. I had a look and found it cool. But I didn't
want to abandon my whitelist filtering.

I therefore am using 3 different folders:
- emails identified as spam.
- emails not identified as spam from people I know (who are on my
 whitelist).
- emails not identified as spam from people I don't know.

SpamAssassin works with a scoring system. I use my whitelist to
decrease the score when somebody is on my whitelist. It is therefore
easier to be considered as a spammer if the address in not on my
whitelist.

I have also enabled Vipul's Razor[3] for increasing my detection
accuracy. When I detect spam which isn't registered in Razor, I do so.

Here is what it looks like:

-*- Promailrc
=============

Whitelist detection:

 # White-base filtering
 WHITELIST_DIR=$HOME/whitelist
 WHITELIST=$WHITELIST_DIR/whitelist
 ffield=`formail -XFrom: | formail -r -xTo: | tr -d ' '`
 :0fhw
 * ? grep -F -i -x -q "$ffield" $WHITELIST
 | formail -i "X-HH-Whitelist: YES"

 :0Efhw
 | formail -i "X-HH-Whitelist: NO"

Spam filtering:

 SPAMASSASSINDIR=$HOME/spam/spamassassin

 :0fw
 | $SPAMASSASSINDIR/spamassassin -c $SPAMASSASSINDIR/rules -P

 :0:
 * ^X-Spam-Flag: YES
   spam

If something hasn't been classified as spam, see if I know the guy:

 INCLUDERC=$HOME/.procmail/spamfiltering

 :0:
 * ^X-HH-Whitelist: NO
   unknown

-*- SpamAssassin
================

Here is how I use my whitelist:

 # Whitelist filtering
 header          ON_WHITELIST    X-HH-Whitelist  =~      /^YES$/
 describe        ON_WHITELIST    Sender whitelisted
 score           ON_WHITELIST    -5.0

I have a few other non-related settings:

 # Don't rewrite the subject
 rewrite_subject 0

 # Leave the content-type alone
 defang_mime 0

 # Report in the header
 report_header 1
 use_terse_report 1

-*- Muttrc
==========

A few things that I configured to make my life easier:

 # Spam stuff
 # Show spam headers
 unignore X-Spam-Status X-Spam-Report
 # Highlight spam
 #ifndef USE_IMAP
 color index     red     default "~h '^X-Spam-Flag: YES'"
 color index     red     blue "~h '^X-Spam-Flag: YES' ! ~h '^X-Spam-Status: .*RAZOR_CHECK'"
 #endif
 # How to report spam
 #define REPORT_BULK_SPAM ";|formail -s spamassassin -r -D\n"
 macro index \eR "T! ~s '\^[[]Moderator Action[]] ' ~h '\^X-Spam-Flag: YES' ! ~h '\^X-Spam-Status: .*RAZOR_CHECK'\n"
 macro index \eS REPORT_BULK_SPAM
 macro pager \eS REPORT_BULK_SPAM

Note that there are spp commands because I preprocess my muttrc[4].

I am going to test that extensively and tweak it if necessary.

 2. http://spamassassin.taint.org/
 3. http://razor.sf.net/
 4. http://larve.net/people/hugo/2002/04/mutt-cpp
--
Hugo Haas <[email protected]> - http://larve.net/people/hugo/
Perhaps, but let's not get bogged down in semantics. -- Homer J.
Simpson

Re: Spam filters

from Gerald Oskoboiny <[email protected]>, Mon, 15 Apr 2002 23:07:31 -0400

Replies:

Parents:

On Mon, Apr 15, 2002 at 06:13:01PM -0400, Hugo Haas wrote:
> * Hugo Haas <[email protected]> [2001-01-27 19:49-0500]
> > I have finally switched from Junkfilter[1] to whitelist based
> > filtering.
> [..]

> I have changed my spam filtering techniques taking into account the
> new type of spam. I talked to Max who started using SpamAssassin[2]
> and was happy about it. I had a look and found it cool. But I didn't
> want to abandon my whitelist filtering.

SpamAssassin looks excellent from what I have seen. I understand
it has some kind of automatic whitelist feature: every time you
receive non-spam from someone, their whitelist score increases?
(or something like that)

Thanks for the docs on your setup, I'm sure that will be useful.

> Note that there are [cpp] commands because I preprocess my muttrc[4].

>   2. http://spamassassin.taint.org/
>   4. http://larve.net/people/hugo/2002/04/mutt-cpp

I'm curious why you need to use cpp; I have most of my settings
in my .muttrc [5], and use a couple extra files [6] for other stuff
that is specific to a certain environment (personal or w3c mail)

For my w3c mail, I invoke mutt with "w3cmutt", which is aliased to:
   zot "w3c mail"; localsuffix="-w3c" mutt

(zot just changes the rxvt title bar; it's called zot because that's
what it was called when I got it from a friend 10 years ago)

Hmm... I guess you tried something like that before switching to
cpp; I'm just wondering what it was you finally needed cpp for.

[5] http://impressive.net/people/gerald/misc/dotfiles/muttrc
[6] http://impressive.net/people/gerald/misc/dotfiles/muttrc-local-devo
   http://impressive.net/people/gerald/misc/dotfiles/muttrc-local-w3c

(I don't need different configs for local/remote, since I always
store all my mail on my laptop.)

--
Gerald Oskoboiny <[email protected]>
http://impressive.net/people/gerald/

Re: Spam filters

from Hugo Haas <[email protected]>, Tue, 16 Apr 2002 07:40:00 -0400

Replies:

  • None.

Parents:

* Gerald Oskoboiny <[email protected]> [2002-04-15 23:07-0400]
> SpamAssassin looks excellent from what I have seen. I understand
> it has some kind of automatic whitelist feature: every time you
> receive non-spam from someone, their whitelist score increases?
> (or something like that)
[..]

Yes, there is an auto-whitelist feature. I haven't tried it yet. I
wasn't sure about how to leverage my existing whitelist to bootstrap
it, so I preferred to try and integrate my whitelist another way, and
maybe I will play with the auto-whitelist later.

I was somewhat worried that the whitelist would let everything
through. By default, you need 5 points to be declared as spam. An
email from the 'EMail-IT' True Stealth System that I was complaining
about[7] scores as follows:

 X-Spam-Report:   13.4 hits, 5 required;
   * -0.3 -- Cc: contains similar domains at least 10 times
   *  1.7 -- BODY: Includes a link to send a mail with a subject
   * -0.2 -- BODY: Includes a URL link to send an email
   *  3.5 -- BODY: Link to a URL containing "remove"
   *  3.0 -- Listed in Razor, see http://razor.sourceforge.net/
   *  4.5 -- HTML-only mail, with no text version
   *  0.2 -- From and To the same address
   *  1.0 -- Received via a relay in orbs.dorkslayers.com
     [RBL check: found 150.82.130.139.orbs.dorkslayers.com.]

With my whitelist 5 point-bonus, it scores 8.4 and is still recognized
as spam. From what I have seen, their whitelist had a 100 point-bonus,
which seems for too much[8]:

header From: address is in the user's white-list USER_IN_WHITELIST -100.0

There must be something I haven't understood about it yet.

> > Note that there are [cpp] commands because I preprocess my muttrc[4].
>
> >   2. http://spamassassin.taint.org/
> >   4. http://larve.net/people/hugo/2002/04/mutt-cpp
>
> I'm curious why you need to use cpp; I have most of my settings
> in my .muttrc [5], and use a couple extra files [6] for other stuff
> that is specific to a certain environment (personal or w3c mail)
>
> For my w3c mail, I invoke mutt with "w3cmutt", which is aliased to:
>     zot "w3c mail"; localsuffix="-w3c" mutt
>
> (zot just changes the rxvt title bar; it's called zot because that's
> what it was called when I got it from a friend 10 years ago)
>
> Hmm... I guess you tried something like that before switching to
> cpp; I'm just wondering what it was you finally needed cpp for.

Indeed I tried something like that, but it got rapidly very complex.
On my laptop, depending on if I read my private mail or my work mail,
if I use isync to read my IMAP folders locally or if I read them
remotely, I have 4 aliases:

 imutt='my_mutt -DWORK_CONF -DON_LAPTOP -DUSE_IMAP --'
 imuttp='my_mutt -DON_LAPTOP -DUSE_IMAP --'
 mutt='my_mutt -DWORK_CONF -DON_LAPTOP --'
 muttp='my_mutt -DON_LAPTOP --'

and at work, I have:

 mutt='my_mutt -DWORK_CONF --'
 muttp='my_mutt --'

My configuration is fairly complex because I have lots of different
settings for each of them. Here is an example:

#ifdef WORK_CONF
  #ifdef USE_IMAP
    #define FOLDER "{localhost:1430}mail"
  #else
    #define FOLDER "~/mail"
  #endif
#else
  #ifdef USE_IMAP
    #define FOLDER "{localhost:1430}private-mail"
  #else
    #define FOLDER "~/private-mail"
  #endif
#endif

set folder=FOLDER

and another one:

#ifndef USE_IMAP
  #ifndef ON_LAPTOP
    # Hide the IMAP server messages
    folder-hook . "push \"<limit> ! (~s 'DELETE THIS MESSAGE -- FOLDER INTERNAL DATA' ~f MAILER-DAEMON)\n\""
  #endif
#endif

I used your technique for a long time, but it just became too complex
to manage so many configurations.

 7. http://impressive.net/archives/fogo/[email protected]
 8. http://spamassassin.taint.org/tests.html
--
Hugo Haas <[email protected]> - http://larve.net/people/hugo/
Kids, your mother's under a lot of pressure, why don't we let her clear
the table in peace? -- Homer J. Simpson

Re: Spam filters

from Hugo Haas <[email protected]>, Tue, 23 Apr 2002 08:30:31 -0400

Replies:

  • None.

Parents:

* Hugo Haas <[email protected]> [2002-04-15 18:13-0400]
> I have changed my spam filtering techniques taking into account the
> new type of spam. I talked to Max who started using SpamAssassin[2]
> and was happy about it. I had a look and found it cool. But I didn't
> want to abandon my whitelist filtering.
>
> I therefore am using 3 different folders:
> - emails identified as spam.
> - emails not identified as spam from people I know (who are on my
>   whitelist).
> - emails not identified as spam from people I don't know.
>
> SpamAssassin works with a scoring system. I use my whitelist to
> decrease the score when somebody is on my whitelist. It is therefore
> easier to be considered as a spammer if the address in not on my
> whitelist.
>
> I have also enabled Vipul's Razor[3] for increasing my detection
> accuracy. When I detect spam which isn't registered in Razor, I do so.

I wanted to give an update an my spam filtering system. With the new
version of SpamAssassin (2.20) and Razor (1.20), my spam filter
catches about 98% of the spam (I lowered the threshold to 3.6 hits and
tweaked a couple of other rules). The 2% of spams that got through
went into my unknown sender folder.

The only non-spam email I saw it catch were bounces from mailing
lists.

In order to make sure that I improve my (and everybody else's) spam
filtering, I systematically bounce spam that went through to
spamassassin-sightings[4] (ESC-B in my Mutt session) and register all
confirmed spam with Razor[5] (ESC-R ; ESC-Z in my Mutt session). This
is easy enough that it just takes a few seconds every day or two.

Basically, I am *very* happy about this new system, and would
encourage people to use it: the more people use Razor and report spams
to it, the less spam we will see.

 4. http://lists.sourceforge.net/lists/listinfo/spamassassin-sightings
 5. http://razor.sourceforge.net/
--
Hugo Haas <[email protected]> - http://larve.net/people/hugo/
Mais alors, tout se recoupe !

HURL: fogo mailing list archives, maintained by Gerald Oskoboiny