procmail
[Top] [All Lists]

Re: From_ and From:

2002-11-21 17:11:35
Alan Clifford wrote:
On Thu, 21 Nov 2002, Tom Allison wrote:

TA> If I am going to make a blacklist to block spam.  Which is the
TA> correct tag to use?
TA>
TA> 99.99% of the same they are identical.  I will assume that this is
TA> not exactly going to be 100% identical though they should be...
TA>
TA> Is there any one which is better than the other?
TA> If some is forging headers, what do you look for?
TA>


I started to collect from and _from headers in my spam prior to installing
a black list.  I never did install the black list because the repeat rate
was so low.

Do not filter out unwanted emails.  Filter in wanted emails.  It's an
attitude of mind rather than a rule.




Here's what I'm trying to do...

spam measurement is based upon:
:0
| bogofilter -p | spamassassin -a

:0
* ^(X-Spam-Status|X-Bogosity): Yes
*!^FROM_DAEMON
{
  What goes on in here is something similar to a TMDA confirmation
  Where I send out an email asking for a response.  Once replid to
  they are whitelisted for a long period of time to allow both
  bogofilter and spamassassin (whitelist) to learn about this new
  persons writing style.
}

The problem is trying to validate FROM addresses.

As for the addresses that don't allow someone to contact them directly from an email list (off-list contact)... well, they are toast. No really good response for that one since they aren't playing "nice" to begin with. However, as long as they do not trigger a Spam rating, they will never get blacklisted.

I know that spam addresses only last a few minutes in most cases.
But if I keep a record of them for a few months it's better than nothing.
--
No one gets sick on Wednesdays.


_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>