Re: [Savannah-help-public] 95% of spam NOT removed

[David Englund]

On Fri, 2008-02-01 at 20:30 +0100, Sylvain Beucler wrote:
> Hi,
> 
> I don't really understand. None of your lists have mail in their
> archive. address@hidden, referenced in your message,
> doesn't have any member either.
> 
> Are you sure they are sent to the list?
> 
> Note that it is normal that you get requests for moderation, but
> listhelper also receives them and performs part of the filtering job
> for you.
> 
> Please give us more concrete examples: the mail, the header, where is
> was sent, where is was received, where it appears in the mail archive
> and which list exactly (not a list of the 7 lists from project
> 'sovix').
> 

I might misunderstood. Which lists do you mean exactly?

Here is an examle with header:



Return-path: <address@hidden>
Envelope-to: address@hidden
Delivery-date: Thu, 29 Nov 2007 08:18:59 -0500
Received: from fencepost.gnu.org [140.186.70.10]
        by localhost with POP3 (fetchmail-6.3.2)
        for <address@hidden> (single-drop); Thu, 29 Nov 2007 14:20:03 +0100
(CET)
Received: from mx10.gnu.org ([199.232.76.166])
        by fencepost.gnu.org with esmtp (Exim 4.60)
        (envelope-from <address@hidden>)
        id 1IxjIB-0004Xl-94
        for address@hidden; Thu, 29 Nov 2007 08:18:59 -0500
Received: from Debian-exim by monty-python.gnu.org with spam-scanned
(Exim 4.60)
        (envelope-from <address@hidden>)
        id 1IxjIA-0001IG-1H
        for address@hidden; Thu, 29 Nov 2007 08:18:58 -0500
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on monty-python
X-Spam-Level: 
X-Spam-Status: No, score=0.6 required=5.0 tests=NO_REAL_NAME,
        UNPARSEABLE_RELAY autolearn=no version=3.1.0
Received: from lists.gnu.org ([199.232.76.165])
        by monty-python.gnu.org with esmtp (Exim 4.60)
        (envelope-from <address@hidden>)
        id 1IxjI8-0001He-UN; Thu, 29 Nov 2007 08:18:57 -0500
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43)
        id 1IxjI8-0006R5-KJ; Thu, 29 Nov 2007 08:18:56 -0500
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
        id 1IxjI7-0006Pl-Op
        for address@hidden; Thu, 29 Nov 2007 08:18:55 -0500
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43) id 1IxjI7-0006P8-BP
        for address@hidden; Thu, 29 Nov 2007 08:18:55 -0500
Subject: Sovix-pretest-bug post from address@hidden requires
approval
From: address@hidden
To: address@hidden
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1895578992=="
Message-ID:
<address@hidden>
Date: Thu, 29 Nov 2007 08:18:53 -0500
Precedence: bulk
X-BeenThere: address@hidden
X-Mailman-Version: 2.1.5
List-Id: sovix-pretest-bug.nongnu.org
X-List-Administrivia: yes
Sender: address@hidden
Errors-To: address@hidden
X-detected-kernel: by monty-python.gnu.org: Linux 2.6, seldom 2.4
(older, 4)
X-UIDL: gO#"!I8>"address@hidden"!]kC!!

--===============1895578992==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

As list administrator, your authorization is requested for the
following mailing list posting:

    List:    address@hidden
    From:    address@hidden
    Subject: ??????? ?? ???
    Reason:  Post by non-member to a members-only list

At your convenience, visit:

    http://lists.nongnu.org/mailman/admindb/sovix-pretest-bug
        
to approve or deny the request.

--===============1895578992==
Content-Type: message/rfc822
MIME-Version: 1.0





> -- 
> Sylvain
> 
> On Fri, Feb 01, 2008 at 04:48:14PM +0100, David Englund wrote:
> > On Fri, 2008-02-01 at 10:25 +0100, Sylvain Beucler wrote:
> > > David,
> > > 
> > > When I ask other people for advice, this means that you need to keep
> > > the Cc: list intact. Sending it to me only will do you no good, except
> > > adding delay, so please use "Reply to all" in such cases.
> > > 
> > > Mail from David:
> > > 
> > > On Thu, Jan 31, 2008 at 08:56:12PM +0100, David Englund wrote:
> > > > On Thu, 2008-01-31 at 20:18 +0100, Sylvain Beucler wrote:
> > > > > On Wed, Jan 30, 2008 at 02:48:53PM +0100, David Englund wrote:
> > > > > > I allready used the recommendation at
> > > > > > https://savannah.gnu.org/maintenance/ListHelperAntiSpam for each
> > > > mailing
> > > > > > list but I still got a _lot_ of spam. Please help me.
> > > > > 
> > > > > Hi,
> > > > > 
> > > > > Please give more details.
> > > > > What is the list name? We could check the list configuration just in
> > > > case.
> > > > > 
> > > > > Karl, Bob, Oleg, any clue?
> > > > 
> > > > The email address I revice spam from is different every time but it
> > > > includes this in the message:
> > > > 
> > > > [begin message]
> > > > [SOME RANDOM HELLO PHRASE, EG:]
> > > > 
> > > > Hello, Hi, Hei, Bonjour
> > > > 
> > > > [Downloadable Software WITH DUPLICATED LETTERS, EG:]
> > > > Downloaddable SSoftware
> > > > 
> > > > [SOME RANDOM TEXT, EG:]
> > > > You see them be hard and rise a little, BLA BLA BLA
> > > > [/end message]
> > > > 
> > > > 
> > > > Here is a list with those messages that I recived today:
> > > > 
> > > >                               From: 
> > > > Laquerre Ding
> > > > <address@hidden>
> > > >                           Reply-To: 
> > > > Laquerre Ding
> > > > <address@hidden>
> > > >                                 To: 
> > > > address@hidden
> > > >                            Subject: 
> > > > tipoff
> > > >                               Date: 
> > > > Thu, 31 Jan 2008 11:51:47 +0000
> > > > (12:51 CET)
> > > > 
> > > > 
> > > >                               From: 
> > > > Tufnell Hammack <address@hidden>
> > > >                           Reply-To: 
> > > > Tufnell Hammack <address@hidden>
> > > >                                 To: 
> > > > address@hidden
> > > >                            Subject: 
> > > > rearranging
> > > >                               Date: 
> > > > Thu, 31 Jan 2008 16:49:01 +0000
> > > > (17:49 CET)
> > > > 
> > > > 
> > > > 
> > > > I also recive messages which I don't know the language of, eg:
> > > > 
> > > > Организация договорной работы на предприятии (обобщение
> > > > судебно-арбитражной практики)
> > > > 
> > > > I use to get many of these mails from different email addresses as well.
> > > > Last was earlier today:
> > > > 
> > > >                               From: 
> > > > address@hidden
> > > >                                 To: 
> > > > address@hidden
> > > >                            Subject: 
> > > > Sovix-commit post from
> > > > address@hidden requires approval
> > > >                               Date: 
> > > > Thu, 31 Jan 2008 10:34:26 -0500
> > > > (16:34 CET)
> > > > 
> > > > 
> > > > 
> > > > The maling lists that get smap is listed at
> > > > http://savannah.nongnu.org/mail/?group=sovix
> > > 
> > 
>