Re: vger weirdness

alano@summanulla.pcx.ncd.com
Mon, 17 May 1999 13:49:22 -0700


> On Sun, 16 May 1999, Matti Aarnio wrote:
>
> > My opinnion about considering "X-UIDL:" as a sign of spam is that
> > the idea is misguided. All in all, an evolutionary view at the
> > spammers can show that for every *simple* countermeasure we use
> > against some simple signature characteristics, the spammers will
> > adapt fairly quickly. The only truly effective way to block the
> > spammers is to have message content analysing system which does
> > recognize spams out of non-spams.
>
> Until now, I have never gotten a single message with an X-UIDL header that
> was not spam. The common spamming software that people use that adds a
> bunch of bogus headers also always adds an X-UIDL header for some reason.
> I suspect that this is because the authors know little about email and
> simply inspected the email that they downloaded from their ISP as an
> example of how to construct headers.

Pegusus mail adds these headers as well. (Pegasus is a common free e-mail
client for Windows.)

> I have modified my filtering rules for kernel list mail to get around this
> particular check. BTW, I do not reject such mail, I simply freeze it
> until I can inspect it.

Better yet, just check for "linux-kernel" in the "To:" or "Cc:" header lines.
I used that on perl5-porters and it dropped the spam to almost zero. (Except
for the stuff coming from perl-bug, but that is another story...)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/