Spam

Pagemakers · Mar 23, 2006

Does anyone have a spam rule set for all those emails that contain just letters and not words, but when they are placed together they form words (badly explained I know).

See below: The first is the email and the one below it is the source code behinds the email. We use Spam Guardian and even its learning facilities do not stops these emails:

Email:

v C y I q A h L t I l S
l V p A f L v I w U h M
f V h I p A d G l R z A

Bu ah y your d M m e n d h i d c c a m t t i h o i n on fm line at half p p p r d i h c s e http://www.papasani.com

Source:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV> </DIV>
<DIV> v C y I q A h L t I l S</DIV>
<DIV> l V p A f L v I w U h M</DIV>
<DIV> f V h I p A d G l R z A</DIV>
<DIV> </DIV>
<DIV>Bu ah y your d M m e n d h i d c c a m t t i h o i n on fm line at half p p p r d i h c s e <A href="http://www.papasani.com">http://www.papasani.com</A></DIV></BODY></HTML>

eilko · Mar 24, 2006

turn on the network checks (SORB/etc), they will help you to mark messages like this as spam

Pagemakers · Mar 24, 2006

Originally posted by eilko
turn on the network checks (SORB/etc), they will help you to mark messages like this as spam

Not sure I understand.

If you mean 'Enable MAPS spam protection' I have it set to bl.spamcop.net

eilko · Mar 24, 2006

you can add/enable serveral test in spamassassin. For instance dcc, razor2 or the RBL-checks.

Check the http://spamassassin.apache.org site howto enable these checks and improve the use of spamassassin.

Pagemakers · Mar 24, 2006

Thanks.

This page http://spamassassin.apache.org/tests_3_1_x.html talks about the .spamassassin/user_prefs folder.

Where is the user_prefs folder. I don't appear to have it.

EDIT: Is it this: /usr/share/spamassassin/user_prefs_template

I guess to enable it globally I copy it and rename it to user_prefs and add it to /etc/mail/spamassassin as detailed at the top of the file itself.

Pagemakers · Mar 24, 2006

Blimey - there are so many rules I am not sure why one to increase. Any ideas based on the email above?

eilko · Mar 24, 2006

install DCC
see http://wiki.apache.org/spamassassin/UsingDcc
files at ART
http://3es.atomicrocketturtle.com/atomic/art/3/RPMS/dcc-1.3.5-1.rhfc3.art.i386.rpm

install Pyzor
see http://wiki.apache.org/spamassassin/UsingPyzor
files at ART
http://3es.atomicrocketturtle.com/atomic/art/3/RPMS/pyzor-0.4.0-5.rhfc3.art.noarch.rpm[

install Razor2
see http://wiki.apache.org/spamassassin/UsingRazor
files at ART
http://3es.atomicrocketturtle.com/atomic/art/3/RPMS/razor-agents-2.77-1.rhfc3.art.i386.rpm

use the RBLs:
http://wiki.apache.org/spamassassin/DnsBlocklists

finally add some custom rulesets:
see: http://www.rulesemporium.com/rules.htm
(Spamguardian has already RulesDuJour installed)

you can find the serverwide settings at:
/etc/mail/spamassassin/local.cf

Highland · Mar 24, 2006

I have also found that Thunderbird can further enhance spam detection since it reads the Spamassassin headers.

I'd also install the qmail-scanner from ART's yum repository. Just be sure to stop spamassassin first.
You can read more about it here
http://www.atomicrocketturtle.com/m...ns&file=index&req=viewarticle&artid=15&page=1

Spam

Pagemakers

Silver Pleskian

eilko

Regular Pleskian

Pagemakers

Silver Pleskian

eilko

Regular Pleskian

Pagemakers

Silver Pleskian

Pagemakers

Silver Pleskian

eilko

Regular Pleskian

Highland

Guest

Similar threads