[NTLUG:Discuss] Spam question

[Jack Snodgrass]

> Ok guys, here's a good question for the group.  I'm sure you've all
> gotten spam that you've written filters for, but it seems the latest
> batch of junk is written specifically to bypass filters.  For example,
> if you write a filter to delete messages containing the word fizgig,
> inevitably, someone wanting to bypass your filters will write the email
> in html with something like this crap in it....fiz<-!---12354->gig and
> the filter merrily passes it by.
>
> So...what have you guys done to kill this garbage when there is nothing
> else in the email to key on?
>
> Wayne

I set up SpamAssassin on my postfix/cyrus box.

I have the DCC check enabled. DCC is nice in the fact that other's
people spam gets added to the list so if they say something is
spam then your system will id it as spam no matter what the
subject or to/from id is.

So, my mail gets gets headers added to it ( SpamAssassin ) and I
can use cyrus/sieve to filter ( move to a spam folder or discard or
reject with rejection message, etc ) each message.

If anyone wants a user at mylinuxguy.net email address to test out
some spam filtering stuff, let me know.

jack