[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4688: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4690: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4691: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4692: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
Poco Forums • View topic - How do you fight spam..

How do you fight spam..

Discussion on Bayesian and standard junk mail filters

Moderators: Eric, Tomas, robin, Michael

How do you fight spam..

Postby mrQQ » Mon Dec 05, 2005 8:46 am

..which has single/numerous images containing spam text/links, and nothing more? or some random words appended?

i'm getting more and more of these, and bayesian can't catch em :(
mrQQ
Frequent Visitor
 
Posts: 66
Joined: Wed Feb 09, 2005 6:03 am

Re: How do you fight spam..

Postby Eric » Mon Dec 05, 2005 10:44 am

mrQQ wrote:..which has single/numerous images containing spam text/links, and nothing more? or some random words appended?

i'm getting more and more of these, and bayesian can't catch em :(
The best way to deal with those IMO, would be to ban the sender/domain.
I also receive messages which only contain an image or two, no text, so they defeat teh Bayesian filter too. :evil:
What I did was creating a pre-download filter to delete %junksenders%,
so these messages won't even be downloaded, but instead automatically removed from my server. :D

I'm sure others use other techniques too. :wink:
Eric
 

Postby mrQQ » Mon Dec 05, 2005 5:34 pm

i'm afraid i can't use that - they come from different domains/senders all the time..
mrQQ
Frequent Visitor
 
Posts: 66
Joined: Wed Feb 09, 2005 6:03 am

Postby Eric » Mon Dec 05, 2005 9:51 pm

mrQQ wrote:i'm afraid i can't use that - they come from different domains/senders all the time..
Mine come from different domains/senders too, so I don't think you can do much more about it. :?
Eric
 

Postby mrQQ » Sun Jan 08, 2006 3:29 am

damn, im getting more and more of these.. i wonder if anyone decent at scripting could write a script, so that if mail html, has only images or so, then it would get it's score waaay increased..
mrQQ
Frequent Visitor
 
Posts: 66
Joined: Wed Feb 09, 2005 6:03 am

Postby Maximus » Sun Jan 08, 2006 4:08 am

O.K.,

I have set up a few filters (press F4) for that. Your problem is tackeled with filters 3 and 4, however you need also filters 1 and 2 to make them more efficient.

Filter 1: General good mail filter

see screenshot in this thread: http://pocosystems.com/forum/viewtopic.php?t=4041

(Mails from known senders (in your address book) are allowed into inbox)

Filter 2: General junk mail filter

Run junk mail filters on all other emails

Filter 3: Filter unwanted mails not treated by junk mail filter
IF message body contains http:// THEN send move message to junk mail

(this affects all emails from senders that are not in your address book and if their message contains a hyperlink. You might want to add another constraint, e.g. if message body contains <table>)

Filter 4: Filter unwanted mails not treated by junk mail filter

IF message body contains
src=cid:
OR
src= cid:
OR
src = cid:
OR
src ="cid:"
OR
src = "cid:"
OR
src =.... (use several combinations with spaces)
THEN
move message to junk mail
END IF

(most spams containing just a gif-file embedd their image with a source starting cid:)

You might have to split this rule into two, since Poco will only allow 4 or 5 OR statements in one filter.

Hope this helps
Adi
Maximus
Resident Poster
 
Posts: 169
Joined: Fri Aug 13, 2004 8:03 pm
Location: Zürich, Switzerland

Postby mrQQ » Sun Jan 08, 2006 4:26 am

yeah i currently have it setup like that.. or similar at least. my problem is, that my office email is mostly in html, has links in signatures, and often has images aswell :( so i cant be that strict about it..

so my current scheme is..

if it has <html, add 1 point
if it has <img, add 2 points
if it has http, add 3 points
if it has href=, add 6 points

coupled with other filters, this does work more or less.. but now i have to worry if it doesnt filter office mails:(
mrQQ
Frequent Visitor
 
Posts: 66
Joined: Wed Feb 09, 2005 6:03 am

Postby Maximus » Sun Jan 08, 2006 9:44 am

Well, no problem

Either you put your office contacts into your address book or you add their whole domains to the allowed senders list, just make sure that filter 1 is set up exactly as shown on the screenshot mentioned in my above post.

- Press CTRL-F4, then
- go to tab "word lists"
- click on button "allowed senders"
- add a section like the following

Code: Select all
#" ------------------------------------------------------------
#" Office contacts
#" ------------------------------------------------------------

@companyDomain1.com
@companyDomain2.org
@companyDomain3.net


Adi
Maximus
Resident Poster
 
Posts: 169
Joined: Fri Aug 13, 2004 8:03 pm
Location: Zürich, Switzerland

Postby mrQQ » Sun Jan 08, 2006 10:02 am

by "office" i mean my all work correspondance, and that doesnt only include my co-workers, but all my clients aswell..
mrQQ
Frequent Visitor
 
Posts: 66
Joined: Wed Feb 09, 2005 6:03 am

Postby Maximus » Sun Jan 08, 2006 1:12 pm

mrQQ wrote:by "office" i mean my all work correspondance, and that doesnt only include my co-workers, but all my clients aswell..


That's why I am proposing to add the whole client domains (not the individual email addresses) to the allowed sender list. I don't know about your business, but I assume you do not have thousands of clients. So therefore you just have to add a dozen entries or so.


Code: Select all
#" ------------------------------------------------------------
#" Office contacts
#" ------------------------------------------------------------

@YourCompany_Domain.com
@YourClient1_Domain.com
@YourClient2_Domain.com
@YourClient3_Domain.com
....
@YourClientX_Domain.com


Adi
Maximus
Resident Poster
 
Posts: 169
Joined: Fri Aug 13, 2004 8:03 pm
Location: Zürich, Switzerland

Postby mrQQ » Sun Jan 08, 2006 5:55 pm

weeeell, it might not be thousands, but it's like 150 or so.. :)
mrQQ
Frequent Visitor
 
Posts: 66
Joined: Wed Feb 09, 2005 6:03 am

Postby Michael » Wed Jan 11, 2006 6:36 pm

Before PSI added Bayesian filtering I was working on some scripts to augment the junk mail filtering. These were intended to be put up for sale as a "script pack" on the PSI site. I shelved them when BF was added. If there was sufficient interest in these I will go back and look into them with the view to offering them up for sale.
Michael
Moderator
 
Posts: 866
Joined: Mon Jul 26, 2004 12:14 pm
Location: Victoria BC, Canada


Return to Junk Mail Filtering Help and How-To

Who is online

Users browsing this forum: No registered users and 2 guests

cron