Gentoo Archives: gentoo-server

From: Alex Efros <powerman@××××××××××××××××××.com>
To: gentoo-server@l.g.o
Subject: Re: [gentoo-server] SPAM protection by requesting confirmation
Date: Sun, 28 Sep 2008 21:49:27
Message-Id: 20080928214923.GF11402@home.power
In Reply to: Re: [gentoo-server] SPAM protection by requesting confirmation by Homer Parker
1 Hi!
2
3 On Sun, Sep 28, 2008 at 04:07:49PM -0500, Homer Parker wrote:
4 > In my case it's a usable Inbox vs 2500-3000 spams a week clogging it
5 > up.. Spamassassin isn't a fire and forget piece of software.. You need
6 > to train bayes, keep rules updated, write rules, etc... I hear
7 > bogofilter is decent as well, might look into it.. But there's no way I
8 > could handle using email without filtering to a quarantine..
9
10 I don't really understand your point. :(
11
12 I use own deliver tool http://powerman.name/soft/deliver.html to filter
13 spam using hand-made perl regular expressions applied to any email headers
14 and content using any logic expressions like:
15
16 To(qr/powerman@/) and Cc(qr/powerman@.*powerman@/)
17
18 (some time ago, after saying "fuck off" to some young spammer who
19 registered in our IT social network and try to discuss "why sending
20 spam is good for fun and profit" I start receiving stupid spam, with
21 my email in To: field and twice again in Cc: field... I think his idea
22 was to deliver 3 spam messages instead of 1 to my inbox, but it all
23 was filtered with simple rule shown above)
24
25 I carefully write and support these rules, and I'm sure they will never
26 match normal email. So, matched emails are just dropped, without quarantine.
27
28 This solved spam issue for me for years. But in last months I receive
29 about 20-50 spam messages every day, and it isn't clear for me how to
30 write regular expressions for that spam - every message is too different
31 from each other and rules for filtering them have a chance to match normal
32 mail.
33
34 Probably it's because I've to public my email on several websites
35 related to IT because I work as freelancer and should provide a way
36 for new customers to contact me.
37 And most spam I receive now trying to mask itself as IT-related message.
38
39 Looks like greylisting will turn these 20-50 spam messages into 2-5
40 messages per day. This amount of spam is acceptable to have in inbox
41 without any quarantine.
42
43
44 So, if it isn't clean FOR ME how to filter that spam with regular
45 expressions and full Perl power in my hands, then HOW can SpamAssassin do
46 this? Sadly, but Bayes isn't a silver bullet and can't solve this too.
47
48 IMHO, SpamAssassin and Bayes are good only for people, who choose between
49 two bad things: either they will be unable to handle MOST of their mail
50 because of huge amount of spam, or they will be unable to handle SOME mail
51 (with low enough and acceptable for them probability) because it will be
52 automatically killed as spam or lost in quarantine. Your tuning of
53 spam weight/score which is acceptable for inbox, acceptable for quarantine
54 and acceptable to kill immediately are just tuning of the chance you'll
55 lose normal mail - you make it larger or smaller, but never 0%!
56
57 Maybe if I will receive 3000 spam which I unable to filter with my
58 custom rules per week, then I will install SpamAssassin and agree to have
59 small chance to lose some mail from time to time... maybe... but I'm not
60 sure and anyway will try to find another solution first (like greylisting).
61 But now I can't agree with any chance to lose mail which is higher than 0%!
62
63 --
64 WBR, Alex.