2002-08-12 09:05:27

by Manik Raina

[permalink] [raw]
Subject: [OT] Re: The spam problem.


> > I'm getting damn tired of getting 50-75 spams per day in my inbox and I
> > don't even use my email address on websites to post.

I'm pretty satisfied with the spam filtering, though i have
a *specific* observation about some fellows who claim to be
related to related to big people (or former big people) in
Africa and want us to transfer some money for them.

Now , these mails keep making rounds on this list, though
they've improved my knowlege of African power politics
somewhat, and improved my who's who in Africa, i would
really like it if we could shut the spammer up.


2002-08-12 13:57:10

by Rik van Riel

[permalink] [raw]
Subject: Re: [OT] Re: The spam problem.

On Mon, 12 Aug 2002, Manik Raina wrote:

> Now , these mails keep making rounds on this list, though
> they've improved my knowlege of African power politics
> somewhat, and improved my who's who in Africa, i would
> really like it if we could shut the spammer up.

Little chance. These messages are generally written in such
a way that there are no useful regexps to distinguish the 419
spam from legitimate email.

I think spamassassin catches about half of the 419 scams, maximum.

kind regards,

Rik
--
Bravely reimplemented by the knights who say "NIH".

http://www.surriel.com/ http://distro.conectiva.com/

2002-08-12 14:26:07

by Richard B. Johnson

[permalink] [raw]
Subject: Re: [OT] Re: The spam problem.

On Mon, 12 Aug 2002, Rik van Riel wrote:

> On Mon, 12 Aug 2002, Manik Raina wrote:
>
> > Now , these mails keep making rounds on this list, though
> > they've improved my knowlege of African power politics
> > somewhat, and improved my who's who in Africa, i would
> > really like it if we could shut the spammer up.
>
> Little chance. These messages are generally written in such
> a way that there are no useful regexps to distinguish the 419
> spam from legitimate email.
>
> I think spamassassin catches about half of the 419 scams, maximum.
>

Blacklist the whole country. At the risk of receiving probably one
or, maybe two, flames from Nigeria, I doubt that there is any
legitimate email from that country at all. So called businessmen
and government personnel from that country, dress in "clown suits".
That should be a hint.

Cheers,
Dick Johnson
Penguin : Linux version 2.4.18 on an i686 machine (797.90 BogoMips).
The US military has given us many words, FUBAR, SNAFU, now ENRON.
Yes, top management were graduates of West Point and Annapolis.

2002-08-12 15:08:00

by Martin J. Bligh

[permalink] [raw]
Subject: Re: [OT] Re: The spam problem.

> Blacklist the whole country. At the risk of receiving probably one
> or, maybe two, flames from Nigeria, I doubt that there is any
> legitimate email from that country at all. So called businessmen
> and government personnel from that country, dress in "clown suits".
> That should be a hint.

1. That's the most offensively stupid thing I've heard in quite
some time. I'd really be much happier if we blacklisted your
email address instead.

2. What makes you think they all still come from Nigeria?

Martin.

2002-08-12 15:25:29

by Martin J. Bligh

[permalink] [raw]
Subject: Re: [OT] Re: The spam problem.

> Now that I have your attention.

No, now you have an entry in my killfile

M.

2002-08-12 20:23:50

by Mathias Gygax

[permalink] [raw]
Subject: Re: [OT] Re: The spam problem.

> > Now that I have your attention.
>
> No, now you have an entry in my killfile

and we saw hitler too.

--
"Sometimes I think the surest sign that intelligent life exists
elsewhere in the universe is that none of it has tried to
contact us."
-- Bill Waterson, cartoonist

2002-08-12 23:33:48

by Paul Jakma

[permalink] [raw]
Subject: Re: [OT] Re: The spam problem.

On Mon, 12 Aug 2002, Rik van Riel wrote:

> Little chance. These messages are generally written in such a way
> that there are no useful regexps to distinguish the 419 spam from
> legitimate email.

use a procmail scoring filter, case sensitive, and score a la:

* 5^6 ([nN]igeria|[Aa]bacha|[zZ]imbabwe|[mM]ugabe)
* 10^6 (MUGABE|MILLION|DOLLARS|NIGERIA|ABACHA|ZIMBABWE)

most of my mail will start with a default score of at least -50. and
above catches 90ish% of 419 spam to me. no reason why spamassassin
couldnt do this too. (presuming it has weighted scoring like
procmail).

[paul@fogarty tmp]$ wc -l ~/.procspam
493 /home/paul/.procspam

and i plan to add the multi-k lines nl.linux.org anti-spam regexps to
it some time too. :)

> Rik

regards,
--
Paul Jakma [email protected] [email protected] Key ID: 64A2FF6A
warning: do not ever send email to [email protected]
Fortune:
That's the true harbinger of spring, not crocuses or swallows
returning to Capistrano, but the sound of a bat on a ball.
-- Bill Veeck