[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: fighting spam || avoiding spam

Santiago Vila <sanvila@unex.es> wrote:
> On Mon, 7 Jun 2004, Andreas Metzler wrote:

>> I've enabled tagging xbl in spamassassin more than a month ago [...]

> SpamAssassin is not a reliable way to tag messages, because it
> considers IPs in *all* Received: headers, not just the single one that
> has to be considered (the one that contains the real IP from which the
> spammer sends his crap).

All messages I receive from Debian have a common path once they have
reached Debian, i.e. if tzere are variations they are caused by the
servers used before Debian is reached. The figure is at least partially
correct (XBL matches only a handful of messages that are not grabbed by
SA anyway)[1]

> Try using a more sophisticated script in perl or some such.

That would not be useful either, because I am not interested in what is
listed in XBL *today* but what was listed when the respective message
was transfered.

> The cbl.abuseat.org list, which is the core of XBL list, is available
> via rsync.

> Also, please don't mix the SBL and the XBL, they are different lists,
> which may be used in combination, or separately.

I did not. This is XBL only, which is what you proposed.
"mandating the use of xbl.spamhaus.org in all MXs"
             cu andreas

[1] And FWIW there are still false positives if you only check the IP
murphy/spohr directly received the mail from:

From: Leo Costela <costela@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Date: Wed, 12 May 2004 22:33:28 -0300
Message-Id: <E1BO56G-000433-00@wisdom.homelinux.net>

From: "Peter Rockai (mornfall)" <mornfall@danill.sk>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Date: Mon, 31 May 2004 15:03:36 +0200
Message-Id: <20040531130336.BA32640E9A6@lorien.logisys.sk>

I stopped checking after that.
NMUs aren't an insult, they're not an attack, and they're
not something to avoid or be ashamed of.
                    Anthony Towns in 2004-02 on debian-devel

Reply to: