>On Wed, 30 Mar 2005 13:01:17 -0800 (PST), you wrote:
>On Wed, 30 Mar 2005, George R.Kasica wrote:
>
>> Date: Wed, 30 Mar 2005 12:37:55 -0600
>> From: George R.Kasica <georgek@netwrx1.com>
>> To: majordomo-users@greatcircle.com
>> Subject: SPAM Filtering from lists/digest
>>
>> Just curious, how can I filter to prevent spam from getting on my
>> various lists and or digests? I'm running SpamAssassin 3.0.2 and
>> getting things tagged as SPAM **** and the spam tag set to yes, and
>> then using the taboo header setting to block it.
>>
>> It seems to catch most things, but I still seem to end up with spam in
>> digests (clearly tagged as spam) as if its eiter missing the taboo
>> header check sometimes or someone is sending directly to the digests
>> rather than posting to the list. I have the digest postings restricted
>> to just list members.
>>
>> Any suggestions? If someone needs headers or examples I can provide
>> that.
>
>Have you used the taboo header setting in listname-digest.config also,
>or just in listname.config?
Here are the settings for the "regular" list:
# taboo_headers [regexp_array] (undef) <resend>
# If any of the headers matches one of these regexps, then the
# message will be bounced for review.
taboo_headers << END
/^X-Spam-Status: Yes/i
/^X-Spam-Flag: YES/i
/^X-Spam-Level: \*\*\*\*\*\*/i
END
and the corresponding digest:
# taboo_headers [regexp_array] (undef) <resend>
# If any of the headers matches one of these regexps, then the
# message will be bounced for review.
taboo_headers << END
/^X-Spam-Status: Yes/i
/^X-Spam-Flag: YES/i
/^X-Spam-Level: \*\*\*\*\*\*/
-
END
I see a difference here and have edited that to match all the other
digests and lists which are like the first one. Could that be the
cause of the spam getting in? If not, what other steps can I take to
filter this out short of moderating the lists. I'm also currently
preventing MIME on the lists, but it seems as if the spammers can get
the stuff through somehow. I tested posting a MIME attach to each list
and it was stripped. Is is possible they are sending to one of the
majordomo or list-owner or outgoing addresses and somehow bypassing
the scans, etc?
Here is a header from one list message that is clearly marked as spam
yet ended up in my digest directory...it seems like they are sending
to the digestify address directly.....this seems to be the "methodf
used for all the spam that gets through...HELP!
[root@eagle acg-l-digest]# more 001
References:
|
|
