linux-kernel - Re: Time to forbid non-subscribers from posting to the list?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 8 Aug 2006 14:34:42 -0700
From:	"jdow" <jdow@...thlink.net>
To:	"Alexey Zaytsev" <alexey.zaytsev@...il.com>,
	"Jes Sorensen" <jes@....com>
Cc:	"Andi Kleen" <ak@...e.de>, <linux-kernel@...r.kernel.org>
Subject: Re: Time to forbid non-subscribers from posting to the list?

From: "Jes Sorensen" <jes@....com>
>>>>>> "Alexey" == Alexey Zaytsev <alexey.zaytsev@...il.com> writes:

> Just install a proper spam filter like everyone else.

There is a modest problem with that, Jes. What looks like spam in
most emails is often ham for this list, particularly with regards
to bug reports and patches.

With SpamAssasssin I have made an ad-hoc fix that works quite nicely
for the several "open" mailing lists I am on.

The first fix is a generic one I made once I was sure the BAYES
filter was well trained with ham and spam such that it seldom if
ever made a real mistake at the extremes of the score ranges. I
then increased the BAYES_95 rule score slightly. And have been
able to raise BAYES_99 to a full threshold of 5 score without
any false positives. YMMV here. But it does help on personal
installations.

First I developed a "feature" detection scheme for each of the lists.
Not all of them are straight forward for detection. Each list has its
own __L_RULE.... These rules are combined into a __LIST_RELAY meta
rule. Finally I create a series of meta rules that fire if BAYES_XX
and __LIST_RELAY are true. These raise the high BAYES scores and
lower the low BAYES scores.

Today I noticed one single spam out of 263 waiting messages when I
got to this mailing list. It was in a foreign language so I simply
fed it to BAYES to raise it from BAYES_80 to BAYES_99. Since it's
score was already 4.5 "it won't happen again."

I thought I'd pass along this "list amplifier" score trick for
SpamAssassin because it appears some folks here are seriously
troubled by the spam getting through.

(SUSE runs SpamAssassin. Unfortunately their BAYES is horridly mis-
trained. So it misfires left and right. I wish they'd fix that. Quite
often lists require some level of tweaking on the BAYES scores when
processing list messages.)

{^_^}   Joanne
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/