[Postfixbuch-users] Wie filtert man solchen Spam?

[Matthias Haegele]

Stefan Förster schrieb:
> * stepken <stepken at web.de> wrote:
>> Frage: Wie filtert man solchen Spam am intelligentesten?
> 
> Space-Ratio, zu lange Zeilen in QP-Encoding.

spamassassin hat einiges (auch ohne Bayes):

[4792] dbg: check: is spam? score=4.419 required=5
[4792] dbg: check: tests=HTML_MESSAGE,MIME_QP_LONG_LINE,RCVD_NUMERIC_HELO
[4792] dbg: check:
subtests=__ANY_OUTLOOK_MUA,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__DNS_FROM_RFC_ABUSE,__DNS_FROM_RFC_POST,__DOS_HAS_ANY_URI,__DOS_RCVD_MON,__ENV_AND_HDR_FROM_MATCH,__FH_HAS_XMSMAIL,__FH_HAS_XPRIORITY,__HAS_ANY_URI,__HAS_MIMEOLE,__HAS_MSGID,__HAS_MSMAIL_PRI,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__HDR_ORDER_FTSDMCXXXX,__LAST_UNTRUSTED_RELAY_NO_AUTH,__MIMEOLE_1106,__MIMEOLE_MS,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MISSING_REF,__MSGID_DOLLARS_MAYBE,__MSGID_DOLLARS_OK,__MSGID_OK_HEX,__MSGID_OK_HOST,__MSGID_RANDY,__NONEMPTY_BODY,__NO_INR_YES_REF,__OE_MSGID_2,__OE_MUA,__RCVD_IN_DNSWL,__RCVD_IN_ZEN,__RFC_IGNORANT_ENVFROM,__SANE_MSGID,__SARE_BODY_BLANKS_5_100,__SARE_BODY_BLNK_5_100,__SARE_HEAD_MIME_VALID,__SARE_HTML_HAS_DIV,__SARE_HTML_HAS_FONT,__SARE_HTML_HAS_PRE,__SARE_META_MURTY3,__SARE_URI_ANY,__SARE_WHITELIST_FLAG,__SUBJ_3DIGIT,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TOCC_EXISTS,__XM_MSOE6,__XM_MS_IN_GENERAL,__XM_OUTLOOK_EXPRESS

aber durchgekommen ist bei mir sowas auch noch nie ;-).


> HAND
> Stefan


-- 
Gruesse/Greetings
MH


Dont send mail to: ubecatcher at linuxrocks.dyndns.org
--