Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread David Relson
At 11:30 AM 11/22/02, Praedor Tempus wrote:

Well, it now appears that all is right with the world.  I managed to get my
wireless connections between desktop and laptop up and running so as to allow
both machines to connection share a dialup account from the desktop.  I also
got my KDE slow startup problem resolved (my desktop hostname isn't yet valid
and enameco.com is down for a day or so).

Now, I am wanting to clean up my procmail filters.  Does anyone have any
particularly good spam filters setup for procmail that seem to do a good 
job?
Would you be willing to share your recipes?

praedor

Praedor,

My procmail recipe is pretty simple.  It checks for korean and japanese 
character sets and puts those messages into file spam-unreadable,then runs 
bogofilter to classify the message as spam or ham, and then takes 
appropriate action.  Info on bogofilter can be found at SourceForge.

David



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread Albert E. Whale
I use the Junkfilter.

I have narrowed my Recipes to get current information as well.  I would be glad
to share it with you.  Let me know if you are interested in it.

Praedor Tempus wrote:

 Well, it now appears that all is right with the world.  I managed to get my
 wireless connections between desktop and laptop up and running so as to allow
 both machines to connection share a dialup account from the desktop.  I also
 got my KDE slow startup problem resolved (my desktop hostname isn't yet valid
 and enameco.com is down for a day or so).

 Now, I am wanting to clean up my procmail filters.  Does anyone have any
 particularly good spam filters setup for procmail that seem to do a good job?
 Would you be willing to share your recipes?

 praedor
 --
 Conservatives of all times are adventitious liars.
 - Friedrich Nietzsche.

   
 Want to buy your Pack or Services from MandrakeSoft?
 Go to http://www.mandrakestore.com

--
Albert E. Whale - CISSP
http://www.abs-comptech.com
--
ABS Computer Technology, Inc. - ESM, Computer  Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread Praedor Tempus
I just picked up junkfilter but cannot build it.  I placed it in 
/usr/local/etc/junkfilter and set the path to point to this as well as my 
procmailrc file.  I do a make create in the junkfilter directory and all I 
get is:

[praedor@lapdog junkfilter]$ make create
Makefile:49: *** target pattern contains no `%'.  Stop.

Nothing comes of it.  

On Friday 22 November 2002 12:07 pm, Albert E. Whale wrote:
 I use the Junkfilter.

 I have narrowed my Recipes to get current information as well.  I would be
 glad to share it with you.  Let me know if you are interested in it.

-- 
Conservatives of all times are adventitious liars.
- Friedrich Nietzsche.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread Albert E. Whale
It is my Understanding that you need to set the
PMDIR = {directory of Procmail Storage info} - i.e. /var/Procmail
JFDIR = {directory of Junkfilter Binaries} - i.e. /var/Procmail/junkfilter

You can set these variables in the .bashrc scripts, or in a NEW Script called
/etc/profile.d/common.sh - which will get executed on each login.

I also place the original jf command (subsequent versions have been converted to
use the Make create command), in the /usr/bin directory with a link to the
actual application.

Hope that helps.

Praedor Tempus wrote:

 I just picked up junkfilter but cannot build it.  I placed it in
 /usr/local/etc/junkfilter and set the path to point to this as well as my
 procmailrc file.  I do a make create in the junkfilter directory and all I
 get is:

 [praedor@lapdog junkfilter]$ make create
 Makefile:49: *** target pattern contains no `%'.  Stop.

 Nothing comes of it.

 On Friday 22 November 2002 12:07 pm, Albert E. Whale wrote:
  I use the Junkfilter.
 
  I have narrowed my Recipes to get current information as well.  I would be
  glad to share it with you.  Let me know if you are interested in it.

 --
 Conservatives of all times are adventitious liars.
 - Friedrich Nietzsche.

   
 Want to buy your Pack or Services from MandrakeSoft?
 Go to http://www.mandrakestore.com

--
Albert E. Whale - CISSP
http://www.abs-comptech.com
--
ABS Computer Technology, Inc. - ESM, Computer  Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread Praedor Tempus
Hmpf.  

I have/had procmail working on my system.  I have a directory: $HOME/.procmail
which contains a link to $HOME/.procmailrc.  I read the somewhat confusing 
directions in the README with junkfilter and elected to install the 
junkfilter files in /usr/local/etc/junkfilter.  I created a symlink in my 
.procmail directory to the junkfilter directory, ie, ln -s 
/usr/local/etc/junkfilter $HOME/.procmail/junkfilter.  I created a directory 
in .procmail called lists which are for my user-specific lists.  I set 
JFDIR=$PMDIR/junkfilter and JFUSERDIR=$PMDIR/lists in my .procmailrc and 
in my .bash_profile.  I was then able to build/make the filters (make create 
and make all) which filled my .procmail/lists directory with a load of empty 
user files.  The jf binary is executable and resides in the junkfilter 
directory plus I followed your example and made a symlink to it in /usr/bin.

I added INCLUDERC=$PMDIR/junkfilter to my .procmailrc.  I've been watching the 
procmail log in my .procmail dir and see whenever a new message is handled 
by procmail.  It just isn't doing anything.  I have set my mailer to display 
ALL headers and I have sent myself fake SPAM messages using keywords and 
combinations included in the junkfilter filters (Please read and the like).  
Nothing I've done leads to any message having any header information altered 
or added to indicated that junkfilter looked it over and passed a judgement.  
None of the fake spams have received any X-IS-SPAM additions and neither has 
any of the real junk I have stored and resent to myself.  

There are no error messages and the procmail log indicates everything is 
OK...but it isn't.

praedor

On Friday 22 November 2002 01:28 pm, Albert E. Whale wrote:
 It is my Understanding that you need to set the
 PMDIR = {directory of Procmail Storage info} - i.e. /var/Procmail
 JFDIR = {directory of Junkfilter Binaries} - i.e. /var/Procmail/junkfilter

--
Conservatives of all times are adventitious liars.
- Friedrich Nietzsche.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread Albert E. Whale
Here's my .procmailrc from my ~aewhale Directory.  One Caveat, I am using 2.4
currently, and I have configure my environment to use the Procmail utility per
individual user.  Do you specify the procmail delivery agent in your Sendmail.mc
(m4 Macro configuration file) or sendmail.cf file?  You will need the entries:

/etc/mail/ABS.mc:define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')
/etc/mail/ABS.mc:FEATURE(`local_procmail')
/etc/mail/ABS.mc:MAILER(procmail)

in order to create the entries:

/etc/mail/ABS.cf:#  $Id: local_procmail.m4,v 8.21 1999/11/18 05:06:23 ca Exp
$  #
/etc/mail/ABS.cf:#  $Id: local_procmail.m4,v 8.21 1999/11/18 05:06:23 ca Exp
$  #
/etc/mail/ABS.cf:#  $Id: procmail.m4,v 8.20 1999/10/18 04:57:54 gshapiro Exp
$  #
/etc/mail/ABS.cf:Mprocmail, P=/usr/bin/procmail, F=DFMSPhnu9,
S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP,
/etc/mail/ABS.cf:   A=procmail -Y -m $h $f $u
/etc/mail/ABS.cf:Mlocal,P=/usr/bin/procmail,
F=lsDFMAw5:/|@qSPfhn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,
/etc/mail/ABS.cf:   A=procmail -Y -a $h -d $u


Don't forget, my ABS should be your sendmail filename.

Here's my .procmailrc script.

[/home/aewhale] more .procmailrc
# junkfilter
# a junk email filter system for procmail
# Copyright 1997-2001 Gregory Sutter [EMAIL PROTECTED]
#
# $Id: procmailrc.sample,v 2.4 2001/05/28 20:10:50 gsutter Exp $
#
# Please read the file README and the page
# http://junkfilter.zer0.org/ before using junkfilter.

# This is a simple sample .procmailrc that calls junkfilter.
# It will work as-is, but you may want to change $PMDIR and $JFDIR.

SHELL=/bin/sh
PATH=$HOME/bin:/usr/bin:/usr/local/bin:/usr/include:/usr/local/sbin:/bin:/sbin:
/usr/sbin
MAILDIR=/var/spool/mail
PMDIR=/var/Procmail
JFDIR=/var/Procmail/junkfilter
DEFAULT=$ORGMAIL
LOGFILE=/var/Procmail/log
LOGABSTRACT=all
VERBOSE=no

# Call junkfilter
INCLUDERC=$JFDIR/junkfilter

# Take action if junkfilter caught a junkmail.
:0
* JFEXP ?? .
{
:0 f
* JFSTATUS ?? 1
| formail -i X-junkfilter: $JFVERSION -i X-Spammer: $JFEXP \
-i X-JFClass: White List

:0 E :
| formail -i X-junkfilter: $JFVERSION -i X-Spammer: $JFEXP \
-i X-JFClass: SPAM  $ORGMAIL
}

# Catches everything else.
:0 :
| formail -i X-JFClass: OK-ABS $ORGMAIL

# EOF procmailrc.sample


HTH!

Praedor Tempus wrote:

 Hmpf.

 I have/had procmail working on my system.  I have a directory: $HOME/.procmail
 which contains a link to $HOME/.procmailrc.  I read the somewhat confusing
 directions in the README with junkfilter and elected to install the
 junkfilter files in /usr/local/etc/junkfilter.  I created a symlink in my
 .procmail directory to the junkfilter directory, ie, ln -s
 /usr/local/etc/junkfilter $HOME/.procmail/junkfilter.  I created a directory
 in .procmail called lists which are for my user-specific lists.  I set
 JFDIR=$PMDIR/junkfilter and JFUSERDIR=$PMDIR/lists in my .procmailrc and
 in my .bash_profile.  I was then able to build/make the filters (make create
 and make all) which filled my .procmail/lists directory with a load of empty
 user files.  The jf binary is executable and resides in the junkfilter
 directory plus I followed your example and made a symlink to it in /usr/bin.

 I added INCLUDERC=$PMDIR/junkfilter to my .procmailrc.  I've been watching the
 procmail log in my .procmail dir and see whenever a new message is handled
 by procmail.  It just isn't doing anything.  I have set my mailer to display
 ALL headers and I have sent myself fake SPAM messages using keywords and
 combinations included in the junkfilter filters (Please read and the like).
 Nothing I've done leads to any message having any header information altered
 or added to indicated that junkfilter looked it over and passed a judgement.
 None of the fake spams have received any X-IS-SPAM additions and neither has
 any of the real junk I have stored and resent to myself.

 There are no error messages and the procmail log indicates everything is
 OK...but it isn't.

 praedor

 On Friday 22 November 2002 01:28 pm, Albert E. Whale wrote:
  It is my Understanding that you need to set the
  PMDIR = {directory of Procmail Storage info} - i.e. /var/Procmail
  JFDIR = {directory of Junkfilter Binaries} - i.e. /var/Procmail/junkfilter
 
 --
 Conservatives of all times are adventitious liars.
 - Friedrich Nietzsche.

   
 Want to buy your Pack or Services from MandrakeSoft?
 Go to http://www.mandrakestore.com

--
Albert E. Whale - CISSP
http://www.abs-comptech.com
--
ABS Computer Technology, Inc. - ESM, Computer  Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Procmail spam filter recipes?

2002-11-22 Thread Praedor Tempus
On Friday 22 November 2002 12:07 pm, David Relson wrote:
[...]
 My procmail recipe is pretty simple.  It checks for korean and japanese
 character sets and puts those messages into file spam-unreadable,then runs
 bogofilter to classify the message as spam or ham, and then takes
 appropriate action.  Info on bogofilter can be found at SourceForge.

I' ve downloaded and installed bogofilter and am giving it a whirl.  Thanks 
for the heads up. I've eliminated my kmail spam filters to see how it does.  
I am also TRYING to use junkfilter - if it works then the headers of junkmail 
should obtain a new spam identifier, thanks to junkfilter, indicating it 
detected it.  Which ever one seems to do the best job wins.

Basically, if bogofilter puts something in my spam folder, it wont have an X 
header alteration.  If junkfilter detects spam, it will add a new spam X 
header.  Now I just need to wait for spam...

praedor

-- 
Conservatives of all times are adventitious liars.
- Friedrich Nietzsche.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com