From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/44143 Path: main.gmane.org!not-for-mail From: Frank Schmitt Newsgroups: gmane.emacs.gnus.general Subject: Re: Spam spam spam spam spam Date: Wed, 03 Apr 2002 15:50:09 +0200 Organization: Hamme net, kren mer och nimmi Sender: owner-ding@hpc.uh.edu Message-ID: References: <87it7exbdo.fsf@enberg.org> Reply-To: NNTP-Posting-Host: localhost.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: main.gmane.org 1017842360 14306 127.0.0.1 (3 Apr 2002 13:59:20 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Wed, 3 Apr 2002 13:59:20 +0000 (UTC) Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by main.gmane.org with esmtp (Exim 3.33 #1 (Debian)) id 16slIG-0003id-00 for ; Wed, 03 Apr 2002 15:59:20 +0200 Original-Received: from sina.hpc.uh.edu ([129.7.128.10] ident=lists) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 16slGq-00011w-00; Wed, 03 Apr 2002 07:57:52 -0600 Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Wed, 03 Apr 2002 07:58:01 -0600 (CST) Original-Received: from sclp3.sclp.com (qmailr@sclp3.sclp.com [209.196.61.66]) by sina.hpc.uh.edu (8.9.3/8.9.3) with SMTP id HAA08414 for ; Wed, 3 Apr 2002 07:57:47 -0600 (CST) Original-Received: (qmail 27648 invoked by alias); 3 Apr 2002 13:57:23 -0000 Original-Received: (qmail 27643 invoked from network); 3 Apr 2002 13:57:23 -0000 Original-Received: from quimby.gnus.org (80.91.224.244) by gnus.org with SMTP; 3 Apr 2002 13:57:23 -0000 Original-Received: from news by quimby.gnus.org with local (Exim 3.12 #1 (Debian)) id 16slSW-00029Q-00 for ; Wed, 03 Apr 2002 16:09:56 +0200 Original-To: ding@gnus.org Original-Path: not-for-mail Original-Newsgroups: gnus.ding Original-Lines: 32 Original-NNTP-Posting-Host: pppin126.max-hochsimmer.rz-online.net Original-X-Trace: quimby.gnus.org 1017842996 8271 212.7.169.126 (3 Apr 2002 14:09:56 GMT) Original-X-Complaints-To: usenet@quimby.gnus.org Original-NNTP-Posting-Date: 3 Apr 2002 14:09:56 GMT X-Posting-Agent: Hamster/1.3.23.4 X-Face: :EL9TzGRN){7|oE2~xQ8Q(VjpjsXgX$~gi&rYD5J5p)$w\Thdl~v:7h`/n)J!8nXT%_+Wj6}@EHM8}QbA(9nX-wrQ:ch1%DauV[?kFasXUcnL#+"K8zOx&$@/M'/},q-eztaJra1|?C+p$h\2XnK-HB"8_U writes: >>That sounds great. I personally use the following technique, which is >>also simple and which, until last week, caught something like 95% of >>the spam. The idea is simple: most spammers (until last week at >>least :-) don't bother putting your e-mail address in the "To:" (or >>"Cc:", or whatever) field. > >Yeah, that used to catch essentially all of mine, but unfortunately it's >now down to only catching about 50%. Spammers are getting smarter. I still catch 90% percent with the technique described above plus those rules: ;;I don't speak Asian languages, so I can only gues that the mails with ;;those encodings are really spam :-) ("Spam" "^Content-Type:.*\\(ks_c_5601-1987\\|EUC-KR\\|iso-2022-jp\\).*") ;;some common spam subjects plus Asia-Spam encodings ("Spam" "^Subject:.*\\(This really work\\|XINGA\\|ADV:\\|XXX\\|\=\?ks_c_5601-1987\?\\|\=\?euc-kr\?\\).*") ;;MUAs spammers often use: ("Spam" "^X-Mailer:\\(\ mailer\\|.*BulkMailer.*\\|.*MIME::Lite.*\\|.*CyberCreek Avalanche.*\\|.*http\:\/\/GetResponse\.com.*\\)$") ;;some spammers who send spam to me which I don't catch with the other rules ("Spam" "^From:.*\\(verizon\.net\\|prontomail\.com\\|money\\).*") -- One Ring to rule them all, One Ring to find them, One Ring to bring them all and in the darkness bind them In the Land of Mordor where the Shadows lie. 19. Dezember 2001