Mailing list junk

Ben Stuyts (benst@terminus.stuyts.nl)
Mon, 13 Oct 1997 11:01:53 +0200


On Mon, 13 Oct 1997, Paul McAvoy wrote:

> I personnaly use a filter that looks at the source of the message and dump
> it to a folder. It seems to be more effective than looking at the subject
> line,

My recipe doesn't look at the subject line. It looks at the message body to 
see that certain typical keywords are present.

> esp when multiple spams come from a variety of sites. Here is one
> that has evolved over time:
>
> :0:
> * -5^0
> * 10^0 ^Received:.*ispam
> * 10^0 ^Received:.*opportunityhotline
> etc

The idea is good, but I don't think that would have killed the spam on the 
mgetty mailing list. The spam on the mgetty mailing list was injected from 
usenet by the news <> mailing list gateway, and thus has valid ^Received 
lines.

I try to minimise domain-based spam filtering. They always come up with new 
names. I have a few simple heuristics that work quite well.

Anyway, this is becoming highly off topic. Let's take it to email or to the 
procmail mailing list or whatever.

With kind regards,
Ben Stuyts
.