Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Support > Blocking Spam

Reply
Thread Tools

Blocking Spam

 
 
Bill P
Guest
Posts: n/a
 
      09-29-2007
Hi
How do you block spam where the subject is four random numbers.
Regards
Bill


 
Reply With Quote
 
 
 
 
Mike Easter
Guest
Posts: n/a
 
      09-29-2007
Bill P wrote:

> How do you block spam where the subject is four random numbers.


.... where spam = email spam, not 'usenet' spam.

You need a spamfilter/tagger which uses multiple strategies, the most
important of which is blocklists and the secondary importance is regex
on the header/body. SpamPal is a powerful filter which will work in
conjunction with your current MUA such as OE.

SP acts as a proxy between your mailprovider and your MUA/OE and 'combs'
the headers and body of the mail and subject tags/labels it as spam. OE
is able to read the subject tag and messagerule sort it into the Junk
folder. From Junk it can be submitted to a blocklist such as spamcop's
which provides you with a positive feedback by which your spam
contributes to a blocklist which you can use -- or you can simply
periodically massively delete your spam whenever you decide you want to
visit the Junk folder.

The purpose of Junk rather than autodeleting is to be able to finetune
the filter to be sure that absolutely zero goodmail ever gets into Junk,
at the cost of an occasional spam getting into the Inbox. SP is
extremely configurable, so you can crank it down as tightly as you
like -- it is also very flexible in its whitelisting powers, which is
nice for those whose goodmail is entirely from known senders, in which
case there should be absolutely zero spam in the Inbox.


--
Mike Easter

 
Reply With Quote
 
 
 
 
Blinky the Shark
Guest
Posts: n/a
 
      09-29-2007
Bill P wrote:
> Hi How do you block spam where the subject is four random numbers.
> Regards


Using regex, block anything whre the Subject header contains no
alphabetical characters. Oh. Your news client can't do that? Get a
better one.


--
Blinky RLU 297263
Killing all posts from Google Groups
The Usenet Improvement Project - http://improve-usenet.org
 
Reply With Quote
 
Bill P
Guest
Posts: n/a
 
      09-30-2007

"Mike Easter" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Bill P wrote:
>
>> How do you block spam where the subject is four random numbers.

>
> ... where spam = email spam, not 'usenet' spam.
>
> You need a spamfilter/tagger which uses multiple strategies, the most
> important of which is blocklists and the secondary importance is regex
> on the header/body. SpamPal is a powerful filter which will work in
> conjunction with your current MUA such as OE.
>
> SP acts as a proxy between your mailprovider and your MUA/OE and 'combs'
> the headers and body of the mail and subject tags/labels it as spam. OE
> is able to read the subject tag and messagerule sort it into the Junk
> folder. From Junk it can be submitted to a blocklist such as spamcop's
> which provides you with a positive feedback by which your spam
> contributes to a blocklist which you can use -- or you can simply
> periodically massively delete your spam whenever you decide you want to
> visit the Junk folder.
>
> The purpose of Junk rather than autodeleting is to be able to finetune
> the filter to be sure that absolutely zero goodmail ever gets into Junk,
> at the cost of an occasional spam getting into the Inbox. SP is
> extremely configurable, so you can crank it down as tightly as you
> like -- it is also very flexible in its whitelisting powers, which is
> nice for those whose goodmail is entirely from known senders, in which
> case there should be absolutely zero spam in the Inbox.
>
>
> --
> Mike Easter
>


Thanks Mike, I'm not sure I understand it all but I'll give it a try.
Regards
Bill


 
Reply With Quote
 
Mike Easter
Guest
Posts: n/a
 
      09-30-2007
Bill P wrote:
> "Mike Easter"
>> Bill P wrote:
>>
>>> How do you block spam where the subject is four random numbers.


One point is that you don't 'characterize' a particular spam by just an
'allusion' to the subject. Any particular spam is a 'conglomeration' of
all its header elements and its entire body, of which the
characterization of the subject is but a tiny tiny element of the whole
item's characteristics.

>> You need a spamfilter/tagger which uses multiple strategies, the most
>> important of which is blocklists and the secondary importance is
>> regex on the header/body. SpamPal is a powerful filter which will
>> work in conjunction with your current MUA such as OE.


So, my point about multiple strategies especially IP address is that by
using a spamfilter tagger which considers the entire spam, not just the
extremely weak message rules of your OE, you have a much better
opportunity to properly identity any item, not just a type of subject,
as spam. OE can only consider a few elements such as subject, body, To
or From strings - which makes for weak and ineffective rules, along with
false positives.

> I'm not sure I understand it all but I'll give it a try.


I'll show you an example of what I mean with an illustration of a recent
spam in sightings. I didn't see one with 4 numbers, but this is an
example of 7 numbers

Subject: 4949690

We can't/shouldn't characterize a spam just by its subject. Here's a
link to the whole spam in GG sightings:

http://groups.google.com/group/news....2942093e2c6fab
or http://snipr.com/1rjzr

If I consider that spam, my SpamPal filter would have tagged it, not on
the basis of its subject, but on the basis of the fact that the source
IP 86.214.210.21 (which rDNS
ANantes-256-1-143-21.w86-214.abo.wanadoo.fr) is blocklisted in CBL,
which also makes it blocklisted other places, such as spamhaus XBL &/or
ZEN.

So, my main points are:

- OE is totally inadequate to be a spamfilter by itself
- when we are considering how to identify spam, we should consider the
entire spam
- by using a proxy before OE, we can turn OE into an excellent filter
by subject labeling


--
Mike Easter

 
Reply With Quote
 
VanguardLH
Guest
Posts: n/a
 
      09-30-2007
"Bill P" wrote ...
> How do you block spam where the subject is four random numbers.



Define a rule in your unnamed e-mail client to delete mails that have
no vowels in the Subject.

 
Reply With Quote
 
Steve Wolstenholme
Guest
Posts: n/a
 
      09-30-2007
On Sun, 30 Sep 2007 12:49:18 -0500, "VanguardLH"
<(E-Mail Removed)> wrote:

>"Bill P" wrote ...
>> How do you block spam where the subject is four random numbers.

>
>
>Define a rule in your unnamed e-mail client to delete mails that have
>no vowels in the Subject.


He doesn't need to name his email client as it is in the message
headers. He is using the same one as you.

Steve

--
Stephen Wolstenholme Neural Planner Software Ltd

EasyNN-plus. The easy way to build neural networks.

http://www.easynn.com
 
Reply With Quote
 
Mike Easter
Guest
Posts: n/a
 
      09-30-2007
Steve Wolstenholme wrote:
> "VanguardLH"
>> "Bill P" wrote ...
>>> How do you block spam where the subject is four random numbers.


>> Define a rule in your unnamed e-mail client to delete mails that have
>> no vowels in the Subject.

>
> He doesn't need to name his email client as it is in the message
> headers. He is using the same one as you.


- OE can't make such a rule
- even if it could, it is a bad rule; I might conceivably email a
goodmail with a number subject
- bad rule making that has a potential for catching goodmail can cause
either the loss of goodmail or dumpster diving in the spam to find the
falsepostive goodmail

--
Mike Easter

 
Reply With Quote
 
VanguardLH
Guest
Posts: n/a
 
      10-01-2007
"Steve Wolstenholme" wrote ...
>
> "VanguardLH" wrote:
>
>>"Bill P" wrote ...
>>> How do you block spam where the subject is four random numbers.

>>
>>Define a rule in your unnamed e-mail client to delete mails that
>>have
>>no vowels in the Subject.

>
> He doesn't need to name his email client as it is in the message
> headers. He is using the same one as you.



The NNTP client used to post to newsgroups need not be the same E-MAIL
client he wants to eliminate received spam - if it is e-mail he is
asking about. He might've used OE from where he happened to submit
his post but that is not the NNTP client at where he wants to eliminat
spam - if it is spam in newsgroups he is asking about. Guessing what
a user is using based on headers isn't a guarantee that is the client
with which they need help. He never mentioned if he wants to
eliminate spam from e-mail or from newsgroups. Flip a coin. I picked
spam in e-mail.

 
Reply With Quote
 
VanguardLH
Guest
Posts: n/a
 
      10-01-2007
"Mike Easter" wrote ...
>
> "VanguardLH"
>>
>> "Bill P" wrote ...
>>> How do you block spam where the subject is four random numbers.

>>
>> Define a rule in your unnamed e-mail client to delete mails that
>> have
>> no vowels in the Subject.

>
> - OE can't make such a rule


The OP never specified *what* e-mail client he is using, or if the
spam is in e-mail or newsgroups.

> - even if it could, it is a bad rule; I might conceivably email a
> goodmail with a number subject


In far over a decade, I have yet to receive any valid and non-spam
e-mail that only contained numbers in the Subject. Yes, it is
possible. It is not probable. I also do not receive legitimate and
non-spam e-mails in Russian, Hebrew, or other languages that can
composed words that do not use any vowel characters. If anyone sent
me an e-mail with only numbers in the Subject, and since the Subject
is the initial preview of an e-mail's contents, and considering that
spam is prevalent everywhere, then someone sending me a number-only
Subject should expect that the recipient cannot preview their e-mail
and might delete it before every reviewing the content of that
message.

If a lot of spam also contained "****", "****", "asshole", or other
obscenties (or highly colorful expressions) then I would write a rule
for that. Legit senders shouldn't be sending bme e-mails with foul
language in the Subject header (and even spammers aren't that stupid).

If you have legit non-spamming senders sending you e-mail with only
numbers in the Subject header then that is YOUR experience or history
of e-mails, not mine and probably not many other users, either.

> - bad rule making that has a potential for catching goodmail can
> cause
> either the loss of goodmail or dumpster diving in the spam to find
> the
> falsepostive goodmail


You can define some "personal" rules that might encompass what lots of
other users see in the Subject of the spam mails they receive. That
does NOT preclude you from defining e-mail rules based on YOUR
personal history of spam mails. To most e-mail users, a Subject
containing only numbers for characters would fit into the same
category as other users asking how to tag spam with garbage text in
the Subject.


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Spam-Spam and more Spam C A Preston Computer Support 2 04-12-2004 07:15 PM



Advertisments