[MPlayer-dev-eng] SPAM filtering on lists

Arpi arpi at thot.banki.hu
Thu Mar 27 01:39:52 CET 2003


Hi,

Some time ago I've developed a procmail ruleset to block spam and other
unwanted mails, and enabled it for the mplayer-users list for testing.
It seems to working ok, at least i don't remember any spam there.
Now i've extended it a bit, and made it common for -dev-eng, -mwn lists,
and will do it for the other lists too soon.

Let's see what does it block:
- bouncing mails sent by this script (most spammers use nonexistant address
  so teh autoreply message bounces back to us)
- mails targeted to the m68HC11 mailing list (dunno, someone subscribed
  mplayer-users to that)
- mails containing X-Spam-Status: Yes (already tagged by spamassassin)
- mails sent by various virus alert systems/scanners (autoreplies to virii
  sent using the maillist address as From:)
- some common viruses (klez, sircam, etc)
- mails matching procmail's FROM_DAEMON rule (mails sent by various mailer
  daemons, mtas, mailing list servers, etc.)
  (this rule caused some false positives, but users can easily override it
  by putting NODAEMON into the subject. they are told to do so in autoreply)
- (un)subscribe in subject:
  (autoreply sends them to mailman page)
- html-only mails (Content-Type:.*text/html in header)
- mails blocked by spamassassin (score >=5.0)
- mails blocked by DCC (body/fuzzy1/fuzzy2 == many)

In addition, engliush lists have these filtering rules:
- body containing gcc*2.96 string (autoreply explining gcc sucks :)))
- body containing cannot.*convert.*wchar_t (common glibc/mandrake bug, see faq)
  (autoreply explaining the bug)
  (TODO: add such rules for animatrix, avi-appending and other common faq questions)
- body containing common (and unique) hungarian word(s)
  (any volunteers to create such wordlist for german, french and maybe some
   other languages?)

Please report any problems, false positives etc. to me.


A'rpi / Astral & ESP-team

--
Developer of MPlayer, the Movie Player for Linux - http://www.MPlayerHQ.hu



More information about the MPlayer-dev-eng mailing list