public inbox for [email protected]  
help / color / mirror / Atom feed
From: Tom Lane <[email protected]>
To: Alvaro Herrera <[email protected]>
Cc: Magnus Hagander <[email protected]>
Cc: Greg Sabino Mullane <[email protected]>
Cc: w^3 <[email protected]>
Subject: Re: Stopping link spam on the lists
Date: Sat, 07 Apr 2012 23:14:57 -0400
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
	<[email protected]>
	<CABUevEyLXSAOEBLa4SFUm9pB_470wVgG4sUEKyfd9SVhU5yxEQ@mail.gmail.com>
	<[email protected]>

Alvaro Herrera <[email protected]> writes:
> The remaining question, in my mind, is: is there a way to reliably
> detect that link spam is just link spam and reject it altogether in
> Spamassassin?  If that's the case, then we could do it at that level and
> save the work downstream.  This is something that Stefan would have to
> answer.

FWIW, all the examples I have seen recently bore all of these traits:

* empty subject line (other than the [LISTNAME] prefix attached by our
  own forwarding code)
* no content to speak of except the payload link
* To: addressed to multiple unrelated addresses

I'm not sure how much the last point helps, unfortunately, because a
heck of a lot of what passes through our lists has multiple To:, and
I doubt it's practical for the spam filter to test how many of the
target addresses are people subscribed to the lists.  The empty subject
would be easy to test for, but surely the spammers will figure out
not to do that soon.

Anyway, what I've been seeing lately has all had X-pg-spam-score 3.5 or
more, which is what made me suggest that moderating on that basis would
improve matters.

			regards, tom lane



view thread (13+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected], [email protected]
  Subject: Re: Stopping link spam on the lists
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox