Re: [SLE] OT - SA defeating thesauri

From: W.D.McKinney (deem_at_wdm.com)
Date: 12/31/03

  • Next message: Carlos E. R.: "Re: [SLE] Regular users unable to issue shutdown and other stuff. (Was Reverse Search (Cntrl-R))" 
    To: suse-linux-e <suse-linux-e@suse.com>
Date: Wed, 31 Dec 2003 10:54:49 -0900

    On Wed, 2003-12-31 at 07:33, Gary wrote:
    > Hi Bruce / Nick,
    >
    > On Wed, 31 Dec 2003 11:15:05 -0500 UTC (12/31/2003, 10:15 AM -0600 UTC my
    > time), Bruce Marshall wrote:
    >
    > B> On Wed December 31 2003 09:51 am, Nick Selby wrote:
    >
    > >> It seems that the latest spate of spam is loaded with seemingly arbitrary
    > >> words to defeat the Baysian processes of SpamAssassin, such as
    >
    > >> I guess that they're doing this to increase the message size with
    > >> un-spamlike words to decrease the ratio of spam-like words to non-spam-like
    > >> words? Does this sound right?
    >
    > >> Anyone ... have a sense of how to defeat this strategy with current
    > >> available configurable settings on SA? Spastic? Anything?
    >
    > Yes, you can turn on RBL checking in your current SA, if it is turned off.
    > Using Razor and spamcop's RBLs will give you the most current, up-to-date,
    > IP address blocks, as a front-line defense.
    >
    > B> Well thank you!! I never could figure out why they were dumping all that
    > B> crap into their messages. That's a good explanation. And yes, it is a
    > B> regular occurrence here for the spam that does make it through.
    >
    > Agreed, this is the latest adaptation made by spammers to bypass Bays
    > filtering.

    Look at this - http://djbdns.skwireless.net
    rbldns is part of the djbdns and is the best way to run your own RBL.
    Add this to SA as well as the others.

    Have fun!

    Dee 

    -- 
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
  • Next message: Carlos E. R.: "Re: [SLE] Regular users unable to issue shutdown and other stuff. (Was Reverse Search (Cntrl-R))"