[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Spam



On Fri, 16 May 2003 at 04:58:04PM +0200, Christian Storch wrote:
> Interesting. That mail has overcome spamassassin without any hits:
> 
> X-Spam-Status: No, hits=0.0 required=4.0
> 	tests=none
> 	version=2.53-lists.debian.org_2003_04_28
> X-Spam-Checker-Version: SpamAssassin 2.53-lists.debian.org_2003_04_28
> (1.174.2.15-2003-03-30-exp)
> 
> Any options to get it?


First, posting Spam back to the list by including it in a reply is not
generally something you want to do...

With that point aside, you can try out bogofilters and razor.  Between
the two of those I have few false positive and few false negatives.
Here is the relevant procmail sections:

:0 Wf
| /home/plhofmei/.bin/removefoot

:0 Wf
| formail -I X-Spam-Status:
:0 Wf
| formail -I X-Spam-Level:

:0 Wc
| razor-check
:0 Waf
| formail -I "X-Razor-Warning: SPAM."
:0 Wa
Mail/Junk
:0 WEf
| formail -I "X-Razor-Warning: NONE."

:0 Wc
| bogofilter -u -3 -l
:0 Waf
| formail -I "X-Spam-Status: Yes, bogofilter"
:0 Wa
Mail/Junk
:0 Ef
| formail -I "X-Spam-Status: No, bogofilter"

:0:
* ^X-Spam-Status: Yes
Mail/Junk


Here is removefoot:

#!/bin/sed -f
: mas
$!N
s/\n/&/2;
t vale
$!b mas
: vale
/^-- \nTo UNSUBSCRIBE, email to .*\nwith a subject of .*/d
P;D


I can't take credit for the above sed tidbit, I believe someone else on
the list wrote that....

It is important to remove the footer b/c otherwise razor will not work
properly.

On a note about bogofilters, it is *VERY* unreliable until you train it.
Don't give up on it, it is well worth it...

Good luck,

-- 
Phillip Hofmeister
Network Administrator/Systems Engineer
IP3 Inc.
http://www.ip3security.com

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import
--
Excuse #240: CPU-angle has to be adjusted because of vibrations coming from the nearby road 

Attachment: pgpz7H70v7zUm.pgp
Description: PGP signature


Reply to: