Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Dec 2002 08:57:37 +0100
From:      Cliff Sarginson <cls@raggedclown.net>
To:        FreeBSD Chat <FreeBSD-chat@FreeBSD.ORG>
Subject:   Re: Spam decisions
Message-ID:  <20021211075737.GD75482@raggedclown.net>
In-Reply-To: <20021211033128.GA9854@HAL9000.homeunix.com>
References:  <20021210073508.GB73284@raggedclown.net> <1649916519.20021210235811@dds.nl> <20021211033128.GA9854@HAL9000.homeunix.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Dec 10, 2002 at 07:31:28PM -0800, David Schultz wrote:
> Thus spake Alex <akruijff@dds.nl>:
> > > Mmm..I finally put a blacklist entry on all domains ending in ".tw".
> > > This is something I swore off doing, but for months now I have been
> > > generating unknown user messages for mail from .tw registered domains. 
> > 
> > > So I have decided to REJECT at receipt all messages in said domains.
> > > So any genuine FreebSD users in Taiwan (for so I take .tw to be) ...
> > > sorry.
> > 
> > 
> > Would it be an (posible) idee to put genuine FreeBSD users on a white
> > list?
> 
It's a public mailing list, that would be impossible...and how would you
do it anyway ? What is a genuine FreeBSD user ? A lot of the mail comes
from potential users, or from people sending mail using Outlook Express.
You cannot eliminate them on that !

> I whitelist mailing list mail and off-list responses thereto, when
> I can identify it.  The idea that ``I don't know anyone in country
> X, so mail from there must be SPAM'' breaks down for mailing
> lists. 

Yes, which is one of the reasons why I was so reluctant to do it.

 I actually think that in general, if a whitelist is
> required at all, there must be something wrong with the model.
> That is probably the case, in fact, but the scheme seems to work
> well in practice.  That doesn't mean that people use SpamAssassin
> are wrong, but they probably have different goals.  My criteria
> are (a) be conservative (no false positives), and (b) try to
> minimize the time spent dealing with SPAM and related gizmos given
> the first constraint.
> 
Yes, I agree with that. False positives do occur. At least one
incarnation of spamassasin seemed to give high marks to any bracketed
text in the Subject line (regexp fault I suspect)...regarding it as a
unique ID number. I have adjusted some of my scoring..which is a nice
facility (I am not easily offended by people swearing :). I seem to
remember it also scored points for verp-munged mailing list headers,
which is a bit unfortunate since several technical mailing lists I have
been on use them, although since these are usually subscriber-only they
don't usually garner enough points to reach the threshold.

I have written a script that extracts addresses/Subject out of my Spam folder,
I quickly eyeball it and delete the genuine ones from the list. The
output file is something that can be slotted straight into my mail
server's postfix header_checks file. This saves a lot of time. 

-- 
Regards
   Cliff Sarginson 
   The Netherlands

[ This mail has been checked as virus-free ]

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021211075737.GD75482>