From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,103b407e8b68350b X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-01-06 11:29:07 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!news-out.newsfeeds.com!propagator2-maxim!news-in.spamkiller.net!telocity-west!DIRECTV!sn-xit-03!sn-xit-01!sn-post-01!supernews.com!corp.supernews.com!not-for-mail From: "Randy Brukardt" Newsgroups: comp.lang.ada Subject: Re: [off-topic] spam-filters Date: Mon, 6 Jan 2003 13:23:36 -0600 Organization: Posted via Supernews, http://www.supernews.com Message-ID: References: <3E147D79.2070703@cogeco.ca> <4519e058.0301031434.51a0c880@posting.google.com> <81NR9.112823$Y86.60750@news2.central.cox.net> <1ciS9.217$Z74.1099@dfw-service2.ext.raytheon.com> X-Newsreader: Microsoft Outlook Express 4.72.3612.1700 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3719.2500 X-Complaints-To: abuse@supernews.com Xref: archiver1.google.com comp.lang.ada:32635 Date: 2003-01-06T13:23:36-06:00 List-Id: Wes Groleau wrote in message <1ciS9.217$Z74.1099@dfw-service2.ext.raytheon.com>... > >> joking. My ISP caught 37 for January 3). But I almost never have to look >> at a spam any more. I think in the last week Mozilla let about 2 slip >> through, and hit one false positive. > >Can it catch them just by headers, or does it evaluate >for spam AFTER it downloads the entire piece of crap, >complete with HTML bloat (generated by Microsoft Word >or some equally lame thing that toggles styles on and >off multiple times on every line) and all the stupid >graphic attachments? Actually, most spam these days are short HTML messages with little or no text. There isn't much load on the server from them. Simply blocking HTML graphics gets rid of many of them. Also, a lot of spam is now encoded in various ways so that simple text filters can't find them. The big messages tend to be real or are viruses. (I'm seeing 3-5 viruses a day in the various filters; most are sent to the public webmaster and mailing list addresses we support.) I know this well, because I wrote a spam-filtering plug-in for our mailserver (in Ada, of course). Our mail server is receiving about 150 messages per day, of which the filter passes only about 15%. About 30% are so frequent and obvious that I'm able to match them and autodelete them. And many of those get caught by the (old) blacklist filtering, which runs after my filter. Randy Brukardt