Re: Recent spam increase

[Michelle Konzack <linux4michelle@freenet.de>]

Am 2006-10-26 00:47:46, schrieb Mike McCarty:
> Tim Post wrote:
> 
> A: Because it reverses the normal order of conversation.
> Q: Why is top-posting considered undesirable by many?
> 
> >What I can't seem to stop is the huge influx of these "penny stock"
> >spams. They're getting smarter than bayes filtering and keyword
> >'snatches' have become almost impossible. 
> 
> Yes, I get several a day myself. The actual "text" of the message is
> often actually an image, while the body of the message is randomly
> selected sentences or words from a collection which would make a
> Bayesian filter delete most of my e-mail.

If you use procmail, try the following recipe before the messages are
threated by spamassassin:

----[ '/home/michelle.konzack/.procmail/FLT_outlook_hello' ]--------

####################################################################
# 
# FLT_outlook_hello
# 
####################################################################

:0 H
* ^X-Mailer:.*Outlook
* ^Received:.*\(helo=\[[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+\]\)
.ATTENTION.FLT_outlook_hello/

--------------------------------------------------------------------

Between 15.10.2006 and today, this filter has catched over 17.000
Spams coming over <lists.debian.org> or <bugs.debian.org> without
a singel FalsePositive.

And since I do  not expect Messages send by Outlook:

----[ '/home/michelle.konzack/.procmail/FLT_outlook_suspect' ]------

####################################################################
# 
# FLT_outlook_suspect
# 
####################################################################

:0 H
* ^X-Mailer:.*Outlook
.ATTENTION.FLT_outlook_suspect/

--------------------------------------------------------------------

Thanks, Greetings and nice Day
    Michelle Konzack
    Systemadministrator
    Tamay Dogan Network
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack   Apt. 917                  ICQ #328449886
                   50, rue de Soultz         MSM LinuxMichi
0033/6/61925193    67100 Strasbourg/France   IRC #Debian (irc.icq.com)