JimD <[EMAIL PROTECTED]> writes:

> Is there a good spam filter out there?  One that is not a pain to setup
> and use?
> 
> My current setup is postfix, procmail and bogofilter.  Maybe I haven't
> trained bogofilter enough or something.  After three weeks, I have yet
> to have one spam marked as spam.  It gets marked unsure, for which I
> have procmail stick those in a maildir folder.

[...]

With all that firepower something is wrong in your setup.

You ask for an `easy' setup but what you list doesn't look easy at all
and I'm afraid there may not be any easy setup since spam is quite
sophisticated. 

I'd recommend the addition of SpamAssassin to your arsenal.

Its default settings will get lots of spam.  But I think something is
wrong with your bogofilter setup for it to miss the same stuff so
long.

Do you have it setup in procmail so that it learns from the ones it
finds as spam?   And do you run it with the necessary flags against
the unsure stuff so that it gets the right keys set in the wordfile.

In the above para I'm just asking if it is setup as discussed in the
bogofilter docu?

Back to SpamAssassin:  It can be set to use the bayes stuff on all
incoming and will eventuall get very accurate... but I think its
default settings my cure your immediate problem with just the basic
install of SpamAssassin and run it from procmail as described in the
supplied docu.
  
My setup looks like:

incoming => procmail => spamassassin => bogofilter

Where procmail has a list of recipes evolved over several years that
trap alot of spam before it gets anywhere else.  Getting those
recipies was not easy or fast.

Once thru my homemade seive in procmail, its passed thru SA which is
quite good at finding most spam.  And finally it gets to bogofilter so
bogofilter isn't getting much of a workout here.

I have to run it against a few unsures several times a day still
though.  But the unsures are not repeat customers.

I'd strongly recommend that you put procmail in as front line defense
and start figuring out how to get most of your incoming spam with what are
really fairly simple (but individual) recipes.

I say this because SA is quite resource intensive so the more you trap
prior to its getting to SA the better.

The one basic procmail filter that will trap the most spam is one that
trips because the mail is not to you.

If most or all of the good mail you get is addressed to you in the To
field then a procmail recipe that trips if your address isn't there
will get a big share of spam, and keep SA from having to work so hard.

Something simple like:

  :0
  ! ^To:[EMAIL PROTECTED]
  probablyspam

Will nail a hefty amount of spam over time.

That is not to say that there isn't a truck loads of spam with your
address as well but you can devise other filters for a lot of that to.

Based on IP address not in this country is another good one for some
people who do not get much or any good mail from outside the us.

But you'll have to muck around with recipes for a while to start
seeing what works.

Another good one is to use some of the letters that appear in the
Asian flood subject lines.  I have no idea what these say or represent
but this one (taken from parts of subject lines) has caught literally
tens of thousands of asian spams over the last 2 years.

I doubt if these characters will survive mailing but they are just
little bits of random subject lines put between [] with no spaces.

I have no idea what they mean and hope it isn't offensive to any
asians reading this list but any mail I get with any of this in the
subject line is spam for sure.

  :0 
  * ^Subject:.*[±¤°í)Çö´ëµðÁöسâ½ÅÇü°øÀå°¡´ë¹æÃÇÑÁÆǸ]
  spam

Good luck

-- 
gentoo-user@gentoo.org mailing list

Reply via email to