RE: [Nolug] Random Word Spam

From: Wimprine, Thomas <twimprine_at_stei.com>
Date: Tue, 6 Jan 2004 16:31:43 -0600
Message-ID: <30397D20E848D2119BA70008C724E28D11CCB4FF@lajeffeex01.stei.com>

I thought of doing this and I believe it would be a great solution on a
single person or a few (less than ten). However I'm running SA with MD on my
gateway for a few thousand people. This would not be an ideal solution.

-----Original Message-----
From: scotth@scottharney.com [mailto:scotth@scottharney.com]
Sent: Tuesday, January 06, 2004 3:52 PM
To: nolug@joeykelly.net
Subject: Re: [Nolug] Random Word Spam

"Wimprine, Thomas" <twimprine@stei.com> writes:

I have a folder for "spam-missed". I move the offending message to
that and a nightly sa-learn cron job tokenizes it as spam. I had a flood
of these in december and it seems to have quieted now though I can't say
for certain that this is a result of the Bayes learning.

Note I also have a ham-missed folder though I have yet to need that.

> You're not the only one noticing this, and you are also correct that the
> idea is to pollute your bayes systems. I haven't figured out what to do
> about it yet.
> Thomas
>
> -----Original Message-----
> From: J. Kent Busbee, Jr. [mailto:buz@penwel.com]
> Sent: Tuesday, January 06, 2004 3:02 PM
> To: nolug@joeykelly.net
> Subject: [Nolug] Random Word Spam
>
> I have had some success with Mimedefang/SpamAssassin, but now I am
> getting spam with what seems like nothing but random words. I suspect
> that this is an html picture only email and that Mimedefang strips the
> picture off. Or, is there something more sinister afoot, like the
> spammers trying to mess up my bayes system?
>
> What can I do about these messages? I'm not sure that bayesian learning
> would be a good idea.
>
> Where can I go to find out what Mimedefang is stripping out, if
> anything?
>
> Thanks for any help. (I figured I am not the only one fighting this...)
>
>
> Here is an example:
>
>> -----Original Message-----
>> From: Frank Vickers [mailto:kwuscnfkafff@msn.com]
>> Sent: Sunday, January 04, 2004 11:21 PM
>> To: contests@penwel.com; vitamins@penwel.com;
>> greg@penwel.com; program@penwel.com; engine@penwel.com;
>> juice@penwel.com; kathy@penwel.com; here@penwel.com
>> Subject: affirmation paraboloid howsomever froth finland
>>
>>
>> cruelty astronomic deject entity ovate malaysia bloodshot
>> entity adieu mechanism holdout
>> present onrushing committeewomen epicurean rudy
>>
>
> ___________________
> Nolug mailing list
> nolug@nolug.org
> ___________________
> Nolug mailing list
> nolug@nolug.org
>

-- 
Scott Harney<scotth@scottharney.com>
"...and one script to rule them all."
gpg key fingerprint=7125 0BD3 8EC4 08D7 321D CEE9 F024 7DA6 0BC7 94E5
___________________
Nolug mailing list
nolug@nolug.org
___________________
Nolug mailing list
nolug@nolug.org
Received on 01/06/04

This archive was generated by hypermail 2.2.0 : 12/19/08 EST