[TAG] Spam filtering

[Rick Moen]

Pete Jewel (pete at phraxos.nildram.co.uk) wrote:
> Mike Orr (mso at oz.net) wrote:
> 
> > The spam filtering on the TAG lists seems to be working really well.  I
> > just checked my spam mailbox and there wasn't a single TAG message in it. 
> > It used to be the majority was TAG-related.
>
> I concur - three cheers for the list admin, hip hip...

Good to hear.  I should pass the credit to the instantiation of "me"
that wears the SMTP-admin hat, though:  Almost all spam-rejection still
is SMTP-time in the MTA, not at the level of subsequent Mailman
processing.  That having been said, let's look over what happens in the
latter step:


Mailman's settings for tag at lists.linuxgazette.net (this list) include an
auto-discard directive for all mail purporting to come from these
senders:

^.*@emailclues.net
^.*@online-pmktg.com
^.*@hol.gr
contract at yehey.com
bestmario at bestmario.com
luckydaylotto_helen at telstra.com
mr_abel1 at tiscali.co.uk
nhammett at sms-hosting.com
hassankatsina2 at voila.fr
ahdlla123 at telstra.com
interlinklotterypromotion_nl at telstra.com
dijduzcevp at aaiworldmarket.com
dwuxvrkwunydji at aaiworldmarket.com
fzmqcaw at yahoo.ca
atggnvvorllmy at umpire.com
aminu1 at jumpy.it
ibrahimgawish42 at telstra.com
owen_stephen2 at tiscali.it
ibra.gawish at telstra.com
entazxqpimp at execs.com
lotterywiners at yahoo.com
wivcbrrkfzz at wtvhmail.com
apc at sonarmail.com
qvulpo at yahoo.com
bwgjtoxdqxuena at naplesnews.net
internationallottobv at zonai.com
bz001 at libero.it
mailer-daemon at linuxgazette.net
tgtt at blue.livedoor.com


You'll note that at least eight or nine of those use clearly randomly
generated mailbox names:  It's a bit silly (and pointless) to enter
blocks on such one-time forgeries:  It violates one of my rules for
living:  "Never try to out-work a spambot."

(Faber and Ben:  There's no point in adding such addresses to the 
discard list, when doing Mailman admin work.)


These Mailman-furnished regexes are in a separate "Legacy anti-spam
filter" section, mail from which will be held:

to: friend at public.com
message-id: relay.comanche.denmark.eu
from: list at listme.com
from: .*@uplinkpro.com


These two are ones I created as "discard" regexes:

^From:.*@paypal.com
^From:.*@ebay.com