Thread: Better spam filtering?

Better spam filtering?

From
Josh Berkus
Date:
Folks,

Is there anything that we can do to filter more spam on press@ ?  There's now 
so much spam coming through (80-90 messages a day) that it's impossible to 
track the few legitimate messages.

As much as I hate the thought, maybe we need mailback whitelisting.

-- 
Josh Berkus
PostgreSQL @ Sun
San Francisco


Re: Better spam filtering?

From
"Marc G. Fournier"
Date:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Wednesday, August 15, 2007 10:07:11 -0700 Josh Berkus <josh@agliodbs.com> 
wrote:

> Folks,
>
> Is there anything that we can do to filter more spam on press@ ?  There's now
> so much spam coming through (80-90 messages a day) that it's impossible to
> track the few legitimate messages.

have you been login into maia and doign *any* Bayes training at all? *I'm* not 
seeing 80-90 messages per day of spam ... is there any pattern to it?  same 
from address, maybe?  same subject?

- ----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQFGw0q24QvfyHIvDvMRAuP5AKClxoaMoyW6tJzt6lOC6wUslr+51ACg1sN/
fp2UfGCdhY7sLGiwf1Wvyck=
=yFNH
-----END PGP SIGNATURE-----



Re: Better spam filtering?

From
Josh Berkus
Date:
Marc,

> have you been login into maia and doign *any* Bayes training at all?
> *I'm* not seeing 80-90 messages per day of spam ... is there any pattern
> to it?  same from address, maybe?  same subject?

No, I told you when you installed Maia that it was unusable (and I'm not 
the only one).  I gave up on it a year ago.  When it gets a decent 
interface, I might give it another try.

The spams seem to come in bursts, which means their single-sourced, but 
they're using a botnet so you can't filter that way.

-- 
--Josh

Josh Berkus
PostgreSQL @ Sun
San Francisco


Re: Better spam filtering?

From
"Marc G. Fournier"
Date:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Well, when you come up with something better, do let me know ... my other 
clients use it and haven't had any complaints, and its well used ...

- --On Wednesday, August 15, 2007 12:00:29 -0700 Josh Berkus <josh@agliodbs.com> 
wrote:

> Marc,
>
>> have you been login into maia and doign *any* Bayes training at all?
>> *I'm* not seeing 80-90 messages per day of spam ... is there any pattern
>> to it?  same from address, maybe?  same subject?
>
> No, I told you when you installed Maia that it was unusable (and I'm not
> the only one).  I gave up on it a year ago.  When it gets a decent
> interface, I might give it another try.
>
> The spams seem to come in bursts, which means their single-sourced, but
> they're using a botnet so you can't filter that way.
>
> --
> --Josh
>
> Josh Berkus
> PostgreSQL @ Sun
> San Francisco



- ----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQFGw1BO4QvfyHIvDvMRAp1EAKCN+Cg4MbeSwfrhR9Cnb8CYh5VGfACfTxW1
my9MygL3zDyQmP8ztk6r+yk=
=SHgF
-----END PGP SIGNATURE-----



Re: Better spam filtering?

From
Josh Berkus
Date:
Marc,

> Well, when you come up with something better, do let me know ... my other
> clients use it and haven't had any complaints, and its well used ...

Sure.  Standard spamassassin.  Dspam.  Anything which allows me to flag spam 
*through an e-mail interface*, and does not require me to flag *every single 
message in the queue* in order to flag any of them.

-- 
Josh Berkus
PostgreSQL @ Sun
San Francisco


Re: Better spam filtering?

From
"Marc G. Fournier"
Date:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Thursday, August 16, 2007 10:28:59 -0700 Josh Berkus <josh@agliodbs.com> 
wrote:

> Marc,
>
>> Well, when you come up with something better, do let me know ... my other
>> clients use it and haven't had any complaints, and its well used ...
>
> Sure.  Standard spamassassin.  Dspam.  Anything which allows me to flag spam
> *through an e-mail interface*, and does not require me to flag *every single
> message in the queue* in order to flag any of them.

Flag them all as Delete and then only flag those as spam that you want to so 
that the others don't affect your Bayes database?

But, as press@postgresql.org is a mailing list, and not a mailbox, who do you 
propose 'flagging spam through an e-mail interface'?

What we could do is remove the mailing list, make it a mailbox and let you 
download email via POP3 so that you could then setup whatever you want on your 
desktop for spam tagging / filtering ... the only ppl on press are 
greg@turnstep.com, you and I ...

- ----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQFGxJJC4QvfyHIvDvMRAhpgAKCHn0DwJHLgyx7wDBaURGDokWl1WwCgpF09
+Zb6+BvNzq1kiyXnPs7nowc=
=sed6
-----END PGP SIGNATURE-----



Re: Better spam filtering?

From
Decibel!
Date:
On Thu, Aug 16, 2007 at 03:06:58PM -0300, Marc G. Fournier wrote:
> But, as press@postgresql.org is a mailing list, and not a mailbox, who do you
> propose 'flagging spam through an e-mail interface'?

Setup email aliases for training spam/ham. I can provide an example.
--
Decibel!, aka Jim Nasby                        decibel@decibel.org
EnterpriseDB      http://enterprisedb.com      512.569.9461 (cell)

Re: Better spam filtering?

From
"Marc G. Fournier"
Date:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Just as an FYI ... the reason press has been getting so much spam is because 
someone disabled the spam scanning on it, and virus, and ... by default, all 
@postgresql.org addresses have this enabled, but at some point, it got disabled 
on that specific address ...

I have re-enabled it ...

- --On Thursday, August 16, 2007 15:31:08 -0500 Decibel! <decibel@decibel.org> 
wrote:

> On Thu, Aug 16, 2007 at 03:06:58PM -0300, Marc G. Fournier wrote:
>> But, as press@postgresql.org is a mailing list, and not a mailbox, who do
>> you  propose 'flagging spam through an e-mail interface'?
>
> Setup email aliases for training spam/ham. I can provide an example.
> --
> Decibel!, aka Jim Nasby                        decibel@decibel.org
> EnterpriseDB      http://enterprisedb.com      512.569.9461 (cell)



- ----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email . scrappy@hub.org                              MSN . scrappy@hub.org
Yahoo . yscrappy               Skype: hub.org        ICQ . 7615664
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)

iD8DBQFGxLlh4QvfyHIvDvMRAtcOAKCqC2UYcuAmT1R3uQnnlp64bIEKCQCdHHKX
nqtH+LBiphEEpT5fFrxJH0Q=
=XFKC
-----END PGP SIGNATURE-----