Re: [Savannah-help-public] 95% of spam NOT removed

[Sylvain Beucler]

Hi,

You need to receive such moderation mails. The 'listhelper' system
will also receive them, and use them as a basic for the Mailman-level
spam filter.

The point is that you receive them, but nobody on the list does. I
have a filter to get rid of those in my personal mailbox, and I know
if I have mails to moderate left when I receive the Mailman daily
lists of pending messages.

We're working on adding a text in the Savannah mail interface to
precise this point (among others).

-- 
Sylvain

On Fri, Feb 01, 2008 at 08:53:22PM +0100, David Englund wrote:
> On Fri, 2008-02-01 at 20:30 +0100, Sylvain Beucler wrote:
> > Hi,
> > 
> > I don't really understand. None of your lists have mail in their
> > archive. address@hidden, referenced in your message,
> > doesn't have any member either.
> > 
> > Are you sure they are sent to the list?
> > 
> > Note that it is normal that you get requests for moderation, but
> > listhelper also receives them and performs part of the filtering job
> > for you.
> > 
> > Please give us more concrete examples: the mail, the header, where is
> > was sent, where is was received, where it appears in the mail archive
> > and which list exactly (not a list of the 7 lists from project
> > 'sovix').
> > 
> 
> I might misunderstood. Which lists do you mean exactly?
> 
> Here is an examle with header:
> 
> 
> 
> Return-path: <address@hidden>
> Envelope-to: address@hidden
> Delivery-date: Thu, 29 Nov 2007 08:18:59 -0500
> Received: from fencepost.gnu.org [140.186.70.10]
>       by localhost with POP3 (fetchmail-6.3.2)
>       for <address@hidden> (single-drop); Thu, 29 Nov 2007 14:20:03 +0100
> (CET)
> Received: from mx10.gnu.org ([199.232.76.166])
>       by fencepost.gnu.org with esmtp (Exim 4.60)
>       (envelope-from <address@hidden>)
>       id 1IxjIB-0004Xl-94
>       for address@hidden; Thu, 29 Nov 2007 08:18:59 -0500
> Received: from Debian-exim by monty-python.gnu.org with spam-scanned
> (Exim 4.60)
>       (envelope-from <address@hidden>)
>       id 1IxjIA-0001IG-1H
>       for address@hidden; Thu, 29 Nov 2007 08:18:58 -0500
> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on monty-python
> X-Spam-Level: 
> X-Spam-Status: No, score=0.6 required=5.0 tests=NO_REAL_NAME,
>       UNPARSEABLE_RELAY autolearn=no version=3.1.0
> Received: from lists.gnu.org ([199.232.76.165])
>       by monty-python.gnu.org with esmtp (Exim 4.60)
>       (envelope-from <address@hidden>)
>       id 1IxjI8-0001He-UN; Thu, 29 Nov 2007 08:18:57 -0500
> Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
>       by lists.gnu.org with esmtp (Exim 4.43)
>       id 1IxjI8-0006R5-KJ; Thu, 29 Nov 2007 08:18:56 -0500
> Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
>       id 1IxjI7-0006Pl-Op
>       for address@hidden; Thu, 29 Nov 2007 08:18:55 -0500
> Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
>       by lists.gnu.org with esmtp (Exim 4.43) id 1IxjI7-0006P8-BP
>       for address@hidden; Thu, 29 Nov 2007 08:18:55 -0500
> Subject: Sovix-pretest-bug post from address@hidden requires
> approval
> From: address@hidden
> To: address@hidden
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="===============1895578992=="
> Message-ID:
> <address@hidden>
> Date: Thu, 29 Nov 2007 08:18:53 -0500
> Precedence: bulk
> X-BeenThere: address@hidden
> X-Mailman-Version: 2.1.5
> List-Id: sovix-pretest-bug.nongnu.org
> X-List-Administrivia: yes
> Sender: address@hidden
> Errors-To: address@hidden
> X-detected-kernel: by monty-python.gnu.org: Linux 2.6, seldom 2.4
> (older, 4)
> X-UIDL: gO#"!I8>"address@hidden"!]kC!!
> 
> --===============1895578992==
> Content-Type: text/plain; charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> 
> As list administrator, your authorization is requested for the
> following mailing list posting:
> 
>     List:    address@hidden
>     From:    address@hidden
>     Subject: ??????? ?? ???
>     Reason:  Post by non-member to a members-only list
> 
> At your convenience, visit:
> 
>     http://lists.nongnu.org/mailman/admindb/sovix-pretest-bug
>         
> to approve or deny the request.
> 
> --===============1895578992==
> Content-Type: message/rfc822
> MIME-Version: 1.0
> 
> 
> 
> 
> 
> > -- 
> > Sylvain
> > 
> > On Fri, Feb 01, 2008 at 04:48:14PM +0100, David Englund wrote:
> > > On Fri, 2008-02-01 at 10:25 +0100, Sylvain Beucler wrote:
> > > > David,
> > > > 
> > > > When I ask other people for advice, this means that you need to keep
> > > > the Cc: list intact. Sending it to me only will do you no good, except
> > > > adding delay, so please use "Reply to all" in such cases.
> > > > 
> > > > Mail from David:
> > > > 
> > > > On Thu, Jan 31, 2008 at 08:56:12PM +0100, David Englund wrote:
> > > > > On Thu, 2008-01-31 at 20:18 +0100, Sylvain Beucler wrote:
> > > > > > On Wed, Jan 30, 2008 at 02:48:53PM +0100, David Englund wrote:
> > > > > > > I allready used the recommendation at
> > > > > > > https://savannah.gnu.org/maintenance/ListHelperAntiSpam for each
> > > > > mailing
> > > > > > > list but I still got a _lot_ of spam. Please help me.
> > > > > > 
> > > > > > Hi,
> > > > > > 
> > > > > > Please give more details.
> > > > > > What is the list name? We could check the list configuration just in
> > > > > case.
> > > > > > 
> > > > > > Karl, Bob, Oleg, any clue?
> > > > > 
> > > > > The email address I revice spam from is different every time but it
> > > > > includes this in the message:
> > > > > 
> > > > > [begin message]
> > > > > [SOME RANDOM HELLO PHRASE, EG:]
> > > > > 
> > > > > Hello, Hi, Hei, Bonjour
> > > > > 
> > > > > [Downloadable Software WITH DUPLICATED LETTERS, EG:]
> > > > > Downloaddable SSoftware
> > > > > 
> > > > > [SOME RANDOM TEXT, EG:]
> > > > > You see them be hard and rise a little, BLA BLA BLA
> > > > > [/end message]
> > > > > 
> > > > > 
> > > > > Here is a list with those messages that I recived today:
> > > > > 
> > > > >                               From: 
> > > > > Laquerre Ding
> > > > > <address@hidden>
> > > > >                           Reply-To: 
> > > > > Laquerre Ding
> > > > > <address@hidden>
> > > > >                                 To: 
> > > > > address@hidden
> > > > >                            Subject: 
> > > > > tipoff
> > > > >                               Date: 
> > > > > Thu, 31 Jan 2008 11:51:47 +0000
> > > > > (12:51 CET)
> > > > > 
> > > > > 
> > > > >                               From: 
> > > > > Tufnell Hammack <address@hidden>
> > > > >                           Reply-To: 
> > > > > Tufnell Hammack <address@hidden>
> > > > >                                 To: 
> > > > > address@hidden
> > > > >                            Subject: 
> > > > > rearranging
> > > > >                               Date: 
> > > > > Thu, 31 Jan 2008 16:49:01 +0000
> > > > > (17:49 CET)
> > > > > 
> > > > > 
> > > > > 
> > > > > I also recive messages which I don't know the language of, eg:
> > > > > 
> > > > > Организация договорной работы на предприятии (обобщение
> > > > > судебно-арбитражной практики)
> > > > > 
> > > > > I use to get many of these mails from different email addresses as 
> > > > > well.
> > > > > Last was earlier today:
> > > > > 
> > > > >                               From: 
> > > > > address@hidden
> > > > >                                 To: 
> > > > > address@hidden
> > > > >                            Subject: 
> > > > > Sovix-commit post from
> > > > > address@hidden requires approval
> > > > >                               Date: 
> > > > > Thu, 31 Jan 2008 10:34:26 -0500
> > > > > (16:34 CET)
> > > > > 
> > > > > 
> > > > > 
> > > > > The maling lists that get smap is listed at
> > > > > http://savannah.nongnu.org/mail/?group=sovix
> > > > 
> > > 
> > 
>