Re: Avalanche of SPAM

On Sat, 7 Jul 2007, David Hoffman wrote:

> To: Keith Roberts <[email protected]>, [email protected]
> From: David Hoffman <[email protected]>
> Subject: Re: Avalanche of SPAM
> 
> I'm thinking of abandoning the reply function and
requiring senders to visit the web site to validate with a URL instead.

Sounds OK to me David. I think I'll use something like that 
as well on my site. On the contact page I could put 
something like:

To ensure that your email is delivered, please put this 
number on a seperate line at the start of your email:

1590d03f99485bd8fac68320a0e6d605

[email protected]

Then create a filter file called:

md5sum_accept

with the above number in it as a regex:

"1590d03f99485bd8fac68320a0e6d605"

then in .tmda/filters/incoming add the following line at 
the top of the file, before the reject filters:

# acceptable md5sum regex matches for email body field
headers-file ~/.tmda/filters/md5sum_accept

Then at the end of the incoming filter file configure the 
reject filters to block any other mail. Could put it on HOLD 
while testing, maybe with something like:

# reject any other mail that gets this far
# store temporarily while testing action with 'hold'
# or forward to spam collection site
# with deliver=mail_addess
#to *@mysite.org [email protected]
to *@mysite.org hold

Regards

Keith

> ----- Original Message ----
> From: Keith Roberts <[email protected]>
> To: [email protected]
> Sent: Saturday, July 7, 2007 8:37:34 AM
> Subject: Avalanche of SPAM
>
>
> Hi. Here are a few excerpts from my incoming log - tmda
> 1.0.3.
>
> Date: Sat Jul 7 05:09:40 BST 2007
> From: US NMA <[email protected]>
>   To: [email protected]
> Subj: The United States National Medical Association
> Actn: DELIVER (headers-file
> /home/keith/.tmda/filters/subject_reject
> [email protected])(6148)
>
> Date: Sat Jul 7 05:09:44 BST 2007
> From: US NMA <[email protected]>
>   To: [email protected]
> Subj: The United States National Medical Association
> Actn: DELIVER (headers-file
> /home/keith/.tmda/filters/subject_reject
> [email protected])(6147)
>
> Date: Sat Jul 7 05:09:46 BST 2007
> From: US NMA <[email protected]>
>   To: [email protected]
> Subj: The United States National Medical Association
> Actn: DELIVER (headers-file
> /home/keith/.tmda/filters/subject_reject
> [email protected])(6135)
>
> Anyone else getting this avalanche? My solution was to add
> the following line to my incoming filter file, after
> checking for mail I want to accept:
>
> # unacceptable regex matches for Subject: mail header field
> headers-file ~/.tmda/filters/subject_reject
> [email protected]
>
> and in the subject_reject file add the following regex line
> to match:
>
> "The United States National Medical Association"
>
> It seems that blocking spam on the From: address hardly
> works, as the from address keeps changing, whereas the
> subject line is alot more constant.
>
> HTH
>
> Regards
>
> Keith
>
> ------------------------------------------------------------
> http://www.karsites.net
> http://www.raised-from-the-dead.org.uk
>
> This email address is challenge-response protected with
> http://www.tmda.net
>
> **Report Spam To One Place**
>
> We at FixingEmail.org are putting together a list of email
> addresses to which we will forward all spam from a single
> address. The idea being that rather than just deleting your
> spam, you can also quite easily forward it to
> [email protected] knowing it will automatically forward
> to all the email addresses taking spam collections.
>
> http://www.fixingemail.org
>
> ------------------------------------------------------------