Re: Spam mail question - yuppers
I'M NOT MEMER OF YOUR MAILING LISTS. WHY THIS MAILS COME TO ME? EVERY DAY COME TO ME 200 MAILS FROM YOUR MAILING LISTS. CAN YOU DO SOMETHING WITH IT? THANK YOU. - Original Message - From: Alvin Oga [EMAIL PROTECTED] To: Noah Meyerhans [EMAIL PROTECTED] Cc: Paulo Henrique Baptista de Oliveira [EMAIL PROTECTED]; debian-user@lists.debian.org Sent: Tuesday, June 04, 2002 3:25 AM Subject: Re: Spam mail question - yuppers hi ya noah yes... it's possible to get dumped into the bl.. ( havent yet ... since i haven't implmented spamfilters ( on some servers - and did get blacklisted by accident... when going to open relay test sites to test one of my servers...fixed the open relay.. resubmitted and was out of there just as quickly... - online open relay tests http://www.paladincorp.com.au/unix/spam/spamlart/ http://www.Linux-Sec.net/Mail/openrelay.gwif.html - am experimenting though .. :-) and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. -- and in my silly preferences.. i do NOT even want the /dev/null to show up ( cluttering ) anywhere in my mail logs - which it currently does for some users that's been nulled -- and another dumb preference... i dont want the spam email to even arrive to be be put into folders ... defeats the purpose to have to go look at it ... usually being a 1MB base64 attachments or html'ized jibberish w/ lots-o-attachments ... - am currently rejecting most all of the html jibberish ( i think the senders dead.letter box is getting bigger ( which is what i like to (indirectly) see ... :-) -- i dont have procmail or any (additional mda ) filters yet.. - just a semi-baked but functional(?) sendmail w/ antispam turned on w/ check_local ... http://www.Linux-Sec.net/Mail/sendmail.gwif.html#Macro - has RBLs turned on and header checking ( and is full of bugz :-) - lots of playing/learningannoying too fun thou... c ya alvin On Mon, 3 Jun 2002, Noah Meyerhans wrote: On Mon, Jun 03, 2002 at 03:44:43PM -0700, Alvin Oga wrote: sometimes ... ( lots )... more often than not... i get tons of spams from ... which i too would like to bounce/reject OK, but if you reject mail from you're likely to be blacklisted. I certainly won't accept mail from domains that reject bounces! I am definitely not alone in this. I think you'd be better off trying to find a blacklist that isn't too fascist. I have had luck with the rfc-ignorant.org blacklists and bl.spamcop.net. Also, by the time the message gets passed off to procmail, exim will already have replaced the with MAILER-DAEMON. If you want to procmail any mail from MAILER-DAEMON, go ahead, but if I were you, I'd just put it in its own folder rather than /dev/null. You are risking losing something useful if you filter such messages. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
I'M NOT MEMER OF YOUR MAILING LISTS. WHY THIS MAILS COME TO ME? EVERY DAY COME TO ME 200 MAILS FROM YOUR MAILING LISTS. CAN YOU DO SOMETHING WITH IT? THANK YOU. - Original Message - From: Noah Meyerhans [EMAIL PROTECTED] To: Alvin Oga [EMAIL PROTECTED] Cc: debian-user@lists.debian.org Sent: Tuesday, June 04, 2002 4:02 AM Subject: Re: Spam mail question - yuppers -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
I'M NOT MEMER OF YOUR MAILING LISTS. WHY THIS MAILS COME TO ME? EVERY DAY COME TO ME 200 MAILS FROM YOUR MAILING LISTS. CAN YOU DO SOMETHING WITH IT? THANK YOU. - Original Message - From: Jens Gecius [EMAIL PROTECTED] To: Noah Meyerhans [EMAIL PROTECTED] Cc: Alvin Oga [EMAIL PROTECTED]; debian-user@lists.debian.org Sent: Tuesday, June 04, 2002 4:33 AM Subject: Re: Spam mail question - yuppers Noah Meyerhans [EMAIL PROTECTED] writes: On Mon, Jun 03, 2002 at 06:25:40PM -0700, Alvin Oga wrote: and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. My point was that if you configure your mail server to reject mail From then you are in violation of several RFCs and are likely to be placed on the DSN blacklist at rfc-ignorant.org. Please don't do it. Now, if you're not the postmaster at your domain, and are only blocking it for your own personal mail (e.g. via ~/.procmailrc), then go ahead. But realize that if you do then you'll be filtering out legitimate messages from MAILER-DAEMON in addition to whatever spam you filter. If you're the postmaster at your domain, use postfix and setup some decent header/body filters to reject the mail with an appropriate smtp-response to the sending host. Postfix is also able to pass such bounces (just tested it locally). Furthermore, you're able to filter hosts which do not have a valid hostname in their HELO/EHLO command, which is often not setup correctly by spammers. This is IMHO the only way to let the spammers know that they are unwanted. Although, if I look at my logs, some of them are just ridiculously persistent... Oh, and every once in a while I get caught by the debian-list. I wrote to the listmaster twice or more already, never got an answer. If I had too many bounces, I got kicked off the list. I could understand this, if the number of rejects is high enough. But, because the listserver is doing only one delivery attempt, I feel, the number (which I haven't figured out, yet...) is currently too low. In one case I was kicked off the list, even though there was no recent bounce in my logs, just accepted mails. :-( This, I didn't understand. One more nuisance: if spam hits debian-user and I get trapped by that listserver-soft, I get kicked off any debian-* list! If I would get kicked off the list I bounced, ok, understandable, but _all_ lists?? Anybody else around here to answer those questions? -- Tschoe,http://gecius.de/gpg-key.txt - Fingerprint: Jens 1AAB 67A2 1068 77CA 6B0A 41A4 18D4 A89B 28D0 F097 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
I'M NOT MEMER OF YOUR MAILING LISTS. WHY THIS MAILS COME TO ME? EVERY DAY COME TO ME 200 MAILS FROM YOUR MAILING LISTS. CAN YOU DO SOMETHING WITH IT? THANK YOU. - Original Message - From: Alvin Oga [EMAIL PROTECTED] To: Noah Meyerhans [EMAIL PROTECTED] Cc: debian-user@lists.debian.org Sent: Tuesday, June 04, 2002 5:45 AM Subject: Re: Spam mail question - yuppers hi ya noah yes.. thanx for the warnings ... have fun alvin On Mon, 3 Jun 2002, Noah Meyerhans wrote: On Mon, Jun 03, 2002 at 06:25:40PM -0700, Alvin Oga wrote: and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. My point was that if you configure your mail server to reject mail From then you are in violation of several RFCs and are likely to be placed on the DSN blacklist at rfc-ignorant.org. Please don't do it. Now, if you're not the postmaster at your domain, and are only blocking it for your own personal mail (e.g. via ~/.procmailrc), then go ahead. But realize that if you do then you'll be filtering out legitimate messages from MAILER-DAEMON in addition to whatever spam you filter. noah -- ___ | Web: http://web.morgul.net/~frodo/ | PGP Public Key: http://web.morgul.net/~frodo/mail.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
* prover ([EMAIL PROTECTED]) [020604 10:56]: I'M NOT MEMER OF YOUR MAILING LISTS. (...ad nauseum) I gotta say, I'm disappointed in spamassassin's default config in this case. I blacklisted the moron and the mails keep coming through. It seems he's managed his way into my auto-whitelist, and even blacklist isn't enough to mark it spam? Surely, I can change the scores on my own, but I would have expected that adding someone to the blacklist would, well, blacklist them. It should be something strong enough to overpower the other checks. Anybody else have an opinion on that? Should I file a wish? In the same vein, a question: What's the easiest way to remove this joker from my AWL? good times, Vineet P.S. I've replied to prover in the manner of Wade Richards' reply to Layne, back in the day. Hopefully that'll have gotten rid of him (though probably not; he's already demonstrated his inability to read this: To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] ...so I don't know why I expect he might be able to read and reply to the unsubscription ping from the membership bot.) -- Currently seeking opportunities in the SF Bay Area Please see http://www.doorstop.net/resume.shtml pgpkz062JXEbr.pgp Description: PGP signature
Re: Spam mail question - yuppers
* Vineet Kumar ([EMAIL PROTECTED]) [020604 12:53]: In the same vein, a question: What's the easiest way to remove this joker from my AWL? Nevermind. I had spamassassin(1p) open in another xterm as I was writing this email; I should have finished reading it first! -R Remove all email addresses, in the headers and body of the mail message read from STDIN, from the automatic whitelist. good times, Vineet -- Currently seeking opportunities in the SF Bay Area Please see http://www.doorstop.net/resume.shtml pgpq5b4xGQzP7.pgp Description: PGP signature
Re: Spam mail question - yuppers
Em Tue, 4 Jun 2002 11:10:39 -0700 Vineet Kumar [EMAIL PROTECTED], conhecido dependente de drogas (Coke e BigMac's), wrote: * prover ([EMAIL PROTECTED]) [020604 10:56]: I'M NOT MEMER OF YOUR MAILING LISTS. (...ad nauseum) [some snipping done] Surely, I can change the scores on my own, but I would have expected that adding someone to the blacklist would, well, blacklist them. It should be something strong enough to overpower the other checks. Anybody else have an opinion on that? Should I file a wish? I am using sylpheed and filtering the sender. While it is not desirable to return the e-mail (can be considered a 'not kind action' by their's ISP), it is being directly trashed. In a speedy link it's ok, but if someone is in a dialup line... :-( -- saudações, irado furioso com tudo Linux User 179402 mais crimes são cometidos em nome das religiões do que em nome do ateísmo. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
hi ya noah yes... it's possible to get dumped into the bl.. ( havent yet ... since i haven't implmented spamfilters ( on some servers - and did get blacklisted by accident... when going to open relay test sites to test one of my servers...fixed the open relay.. resubmitted and was out of there just as quickly... - online open relay tests http://www.paladincorp.com.au/unix/spam/spamlart/ http://www.Linux-Sec.net/Mail/openrelay.gwif.html - am experimenting though .. :-) and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. -- and in my silly preferences.. i do NOT even want the /dev/null to show up ( cluttering ) anywhere in my mail logs - which it currently does for some users that's been nulled -- and another dumb preference... i dont want the spam email to even arrive to be be put into folders ... defeats the purpose to have to go look at it ... usually being a 1MB base64 attachments or html'ized jibberish w/ lots-o-attachments ... - am currently rejecting most all of the html jibberish ( i think the senders dead.letter box is getting bigger ( which is what i like to (indirectly) see ... :-) -- i dont have procmail or any (additional mda ) filters yet.. - just a semi-baked but functional(?) sendmail w/ antispam turned on w/ check_local ... http://www.Linux-Sec.net/Mail/sendmail.gwif.html#Macro - has RBLs turned on and header checking ( and is full of bugz :-) - lots of playing/learningannoying too fun thou... c ya alvin On Mon, 3 Jun 2002, Noah Meyerhans wrote: On Mon, Jun 03, 2002 at 03:44:43PM -0700, Alvin Oga wrote: sometimes ... ( lots )... more often than not... i get tons of spams from ... which i too would like to bounce/reject OK, but if you reject mail from you're likely to be blacklisted. I certainly won't accept mail from domains that reject bounces! I am definitely not alone in this. I think you'd be better off trying to find a blacklist that isn't too fascist. I have had luck with the rfc-ignorant.org blacklists and bl.spamcop.net. Also, by the time the message gets passed off to procmail, exim will already have replaced the with MAILER-DAEMON. If you want to procmail any mail from MAILER-DAEMON, go ahead, but if I were you, I'd just put it in its own folder rather than /dev/null. You are risking losing something useful if you filter such messages. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
On Mon, Jun 03, 2002 at 06:25:40PM -0700, Alvin Oga wrote: and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. My point was that if you configure your mail server to reject mail From then you are in violation of several RFCs and are likely to be placed on the DSN blacklist at rfc-ignorant.org. Please don't do it. Now, if you're not the postmaster at your domain, and are only blocking it for your own personal mail (e.g. via ~/.procmailrc), then go ahead. But realize that if you do then you'll be filtering out legitimate messages from MAILER-DAEMON in addition to whatever spam you filter. noah -- ___ | Web: http://web.morgul.net/~frodo/ | PGP Public Key: http://web.morgul.net/~frodo/mail.html pgpQDakatu1U0.pgp Description: PGP signature
Re: Spam mail question - yuppers
Noah Meyerhans [EMAIL PROTECTED] writes: On Mon, Jun 03, 2002 at 06:25:40PM -0700, Alvin Oga wrote: and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. My point was that if you configure your mail server to reject mail From then you are in violation of several RFCs and are likely to be placed on the DSN blacklist at rfc-ignorant.org. Please don't do it. Now, if you're not the postmaster at your domain, and are only blocking it for your own personal mail (e.g. via ~/.procmailrc), then go ahead. But realize that if you do then you'll be filtering out legitimate messages from MAILER-DAEMON in addition to whatever spam you filter. If you're the postmaster at your domain, use postfix and setup some decent header/body filters to reject the mail with an appropriate smtp-response to the sending host. Postfix is also able to pass such bounces (just tested it locally). Furthermore, you're able to filter hosts which do not have a valid hostname in their HELO/EHLO command, which is often not setup correctly by spammers. This is IMHO the only way to let the spammers know that they are unwanted. Although, if I look at my logs, some of them are just ridiculously persistent... Oh, and every once in a while I get caught by the debian-list. I wrote to the listmaster twice or more already, never got an answer. If I had too many bounces, I got kicked off the list. I could understand this, if the number of rejects is high enough. But, because the listserver is doing only one delivery attempt, I feel, the number (which I haven't figured out, yet...) is currently too low. In one case I was kicked off the list, even though there was no recent bounce in my logs, just accepted mails. :-( This, I didn't understand. One more nuisance: if spam hits debian-user and I get trapped by that listserver-soft, I get kicked off any debian-* list! If I would get kicked off the list I bounced, ok, understandable, but _all_ lists?? Anybody else around here to answer those questions? -- Tschoe,http://gecius.de/gpg-key.txt - Fingerprint: Jens 1AAB 67A2 1068 77CA 6B0A 41A4 18D4 A89B 28D0 F097 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Spam mail question - yuppers
hi ya noah yes.. thanx for the warnings ... have fun alvin On Mon, 3 Jun 2002, Noah Meyerhans wrote: On Mon, Jun 03, 2002 at 06:25:40PM -0700, Alvin Oga wrote: and the From is a nuisance from some spammers is a good thing to reject ( ie ... and is spammer ) - havent figured it out yet .. My point was that if you configure your mail server to reject mail From then you are in violation of several RFCs and are likely to be placed on the DSN blacklist at rfc-ignorant.org. Please don't do it. Now, if you're not the postmaster at your domain, and are only blocking it for your own personal mail (e.g. via ~/.procmailrc), then go ahead. But realize that if you do then you'll be filtering out legitimate messages from MAILER-DAEMON in addition to whatever spam you filter. noah -- ___ | Web: http://web.morgul.net/~frodo/ | PGP Public Key: http://web.morgul.net/~frodo/mail.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
