[Mailman-Users] fund management[private & confidential]

[Mike Noyes]

At 03:18 PM 2/14/01 -0800, Marc MERLIN wrote:
><snip>
>There is a better option.
>Since the  python.org folks run  exim 3.21, they  could stick this
>in their exim.conf:
>----------------------------------------------------------------------
>sender_verify_hosts_callback = /etc/mail/badsendinghosts:*
>sender_verify_callback_domains = /etc/mail/baddomains:*
># Wait up to 90s for the remote mail server to answer
>sender_verify_callback_timeout = 90s
>
># Refuse messages with bad headers
>headers_sender_verify = true
>headers_check_syntax = true
>headers_checks_fail = true
>----------------------------------------------------------------------
><snip>

Marc,
I forwarded your spam solution to Dave Cinege. He suggested I post this
to mailman-users. I hope someone finds this information useful.


Fwd: Re: [offlist] [MAILING LIST] New aggressive spam controls
>Date: Thu, 15 Feb 2001 15:56:13 -0500
>From: Dave Cinege <dcinege at psychosis.com>
>To: Mike Noyes <mhnoyes at users.sourceforge.net>
>Subject: Re: [offlist] [MAILING LIST] New aggressive spam controls
>
>Mike Noyes wrote:
> > 
> > Dave,
> > I'm catching up with the mailman-users list traffic, and I noticed
> > this post from Mark MERLIN. Is this similar to what you're doing?
>
>Thanks for passing that along. I'm doing one of those checks. I'll 
>look at the other ones he suggests.
>
>THe primary thing I'm doign is running a system filter. So far it is work VERY
>well. I've only had one peice of 'hong kong' spam reach me,
>and I just modified that check to help.
>
>You may want to pass this along to the MM list. What I have commented
>out is what proved to catch valid mail.
>
># Exim filter
>if      ($h_subject: is "FREE"
>         or $h_subject: matches "\\^FREE .*"
>         or $h_subject: matches ".* FREE\\$"
>         or $h_subject: contains " FREE "
>         or $h_subject: contains "F R E E"
>         or $h_subject: contains "MILLION"
>         or $h_subject: contains "FOR ONLY \\$"
>         or $h_subject: contains "GUARANTEED"
>         or $h_subject: contains "INSTANTLY"
>         or $h_subject: contains "CALL NOW"
>         or $h_subject: contains "ABSOULTELY"
>         or $h_subject: contains "MONEY"
>         or $h_subject: contains "MAKE UP TO"
>         or $h_subject: contains "E-Mail Addresses"
>         or $h_subject: contains "increase sales"
>         or $h_subject: matches ".*[67] Figures.*"
>         or $h_subject: contains "Responding To Your Request!"   
>         or $h_subject: contains "Make the right decision"
>         or $h_subject: contains "Fortunes Made"
>         or $h_subject: contains "Wealth"        
>         or $h_subject: contains "hardcore"
>         or $h_subject: contains "win a "
>#       or $h_subject: matches ".*[!? ]*[0-9][0-9][0-9]*\\$"
>         or $h_subject: matches ".*[!?.][ ]*[0-9][0-9][0-9]\\$"
>         or $h_subject: matches ".*[!?.][ ]*[0-9][0-9][0-9][0-9]\\$"
>         or $h_subject: matches ".*[!?.][ ]*[0-9][0-9][0-9][0-9][0-9]\\$"        
>         or $h_subject: contains "\\$\\$"
>         or $h_subject: contains "\\$ \\$"       
>      or $h_subject: matches ".*[ÁÙ§¶°±ÚÃÌ¿Öªº³«§äâᶳÅÚÅèÄÉêÇë].*"
>         or $h_subject: contains "MLM")
>         and not error_message
>         and not $h_X-SPAM: contains "Probable SPAM"
>         and not $h_to: contains "postmaster at psychosis.com"
>         and not $sender_address_domain is "psychosis.com"
>then
>         headers add "X-SPAM: Probable SPAM - Bad Subject:"
>         unseen deliver postmaster at psychosis.com errors_to postmaster at psychosis.com
>         fail text "This message looks like spam to me.\n    If this filter is in error
>please mail 'postmaster at psychosis.com'"
>endif
>
>
>if      ($h_subject: contains "Here you have, ;o)")
>         and not error_message
>         and not $h_X-SPAM: contains "Probable SPAM"
>         and not $h_to: contains "postmaster at psychosis.com"
>         and not $sender_address_domain is "psychosis.com"
>then
>         headers add "X-SPAM: Probable SPAM - Virus!"
>         unseen deliver postmaster at psychosis.com errors_to postmaster at psychosis.com
>         fail text "**IMPORTANT!!!**  **IMPORTANT!!!**  **IMPORTANT!!!** \n    This
>message appears to contain a virus!\n    It was probably sent from your system
>without your knowledge.\n    Please check your system immediately.\n    If this
>filter is in error please mail 'postmaster at psychosis.com'"
>endif
>
>if      ($h_precedence: is "junk"
>#       or $h_to: is ""
>         or $h_to: is "<Undisclosed Recipients>"
>         or $h_from: is "")
>         and not error_message
>         and not $h_X-SPAM: contains "Probable SPAM"
>         and not $h_to: contains "postmaster at psychosis.com"
>         and not $sender_address_domain is "psychosis.com"
>then
>         headers add "X-SPAM: Probable SPAM - Bad To: or From: or type 'Junk'"
>         unseen deliver postmaster at psychosis.com errors_to postmaster at psychosis.com
>         fail text "This message looks like spam to me.\n    If this filter is in error
>please mail 'postmaster at psychosis.com'"
>endif
>
>
>finish
>
>
>
>-- 
>"Nobody will ever be safe until the last cop is dead."
>                 NH Rep. Tom Alciere - (My new Hero) 

--
Mike Noyes <mhnoyes at users.sourceforge.net>
http://leaf.sourceforge.net/