You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris Santerre <cs...@MerchantsOverseas.com> on 2004/03/01 17:11:07 UTC
When subscribe to ham uses an ad from a spammer????
I got a report of a bigevil FP. However, it technically isn't.
www.masterytv.net is an mlm spammer. No doubt about it. They have sent UCE
and UBE to users of my company who did NOT optin or signup for their emails.
I'll pull up spams if you doubt me, which I don't think you will :)
So why the reported FP? Well they have an advertisement in a legit signup
ham. Granted it was one of those fruity dailyinbox.com chicken soup for the
soul which was 90% ads. But they have never spammed a user here.
So what to do? If every spammer in bigevil was to get a legit sender to take
an ad from them, then they would all be FPs? I can't bow down to that! More
likely the users who dailyinbox.com "Chicken oup for the soul" should
contact dailyinbox.com and tell them they are getting marked as spam because
of someone they are advertising....a spammer!
Does that make sense? I'm I becoming a hardened and jaded hard @zz like the
guys on SPAM-L? ;)
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
Re: When subscribe to ham uses an ad from a spammer????
Posted by Loren Wilton <lw...@earthlink.net>.
Hum. If SA could do random rewrites, or maybe just URI rewrites, then all
the BigEvil urls detected could be replaced with a link to a joke-of-the-day
page instead in those cases. Amybe add a footer below the spam footer
describing it as spam.
Loren
----- Original Message -----
From: "Andy Blanchard" <an...@zocalo.uk.com>
To: <sp...@incubator.apache.org>
Sent: Tuesday, March 02, 2004 1:36 AM
Subject: Re: When subscribe to ham uses an ad from a spammer????
> > For stuff like this, I think the only thing I would maybe like to see is
a
> > comment in the file that indicates it could be an issue and where to
> > comment
> > it out. This makes everybody happy. You get to stay a hard @zz. And
the
> > folks that use BE are empowered to edit or skip the section that is
known
> > to possibly cause a problem in some environments.
>
> Agreed. BigEvil is not a standard ruleset, so one would hope that the
> users of the file have *some* idea what the implications might be if they
> install it, and what to do if it doesn't work out for them. If this does
> become a new spammer tactic, then making the comment on a BigEvil match
> very explicit about what happened and what to do (or a pointer to a web
> page with that information) sounds like a good idea though.
>
> Another tactic to prevent this taking off might be to point the operators
> of the legitimate lists at the BigEvil homepage, explaining what it is and
> why their mailing has been blocked. Perhaps if that can be combined that
> with a quick CGI based check to see if a given domain is listed it would
> enable the list operators to make an informed decision in future. They
> could refuse the advert (and preferably future business with that client)
> or they could decide to proceed anyway, but with the knowledge that their
> newsletter might be classified as spam.
>
> Andy
>
Re: When subscribe to ham uses an ad from a spammer????
Posted by Andy Blanchard <an...@zocalo.uk.com>.
> For stuff like this, I think the only thing I would maybe like to see is a
> comment in the file that indicates it could be an issue and where to
> comment
> it out. This makes everybody happy. You get to stay a hard @zz. And the
> folks that use BE are empowered to edit or skip the section that is known
> to possibly cause a problem in some environments.
Agreed. BigEvil is not a standard ruleset, so one would hope that the
users of the file have *some* idea what the implications might be if they
install it, and what to do if it doesn't work out for them. If this does
become a new spammer tactic, then making the comment on a BigEvil match
very explicit about what happened and what to do (or a pointer to a web
page with that information) sounds like a good idea though.
Another tactic to prevent this taking off might be to point the operators
of the legitimate lists at the BigEvil homepage, explaining what it is and
why their mailing has been blocked. Perhaps if that can be combined that
with a quick CGI based check to see if a given domain is listed it would
enable the list operators to make an informed decision in future. They
could refuse the advert (and preferably future business with that client)
or they could decide to proceed anyway, but with the knowledge that their
newsletter might be classified as spam.
Andy
Re: When subscribe to ham uses an ad from a spammer????
Posted by Ray Dzek <rd...@specialized.com>.
For stuff like this, I think the only thing I would maybe like to see is a
comment in the file that indicates it could be an issue and where to comment
it out. This makes everybody happy. You get to stay a hard @zz. And the
folks that use BE are empowered to edit or skip the section that is known to
possibly cause a problem in some environments.
----- Original Message -----
From: "Chris Santerre" <cs...@MerchantsOverseas.com>
To: "Spamassassin-Talk (E-mail)" <sp...@incubator.apache.org>
Sent: Monday, March 01, 2004 8:11 AM
Subject: When subscribe to ham uses an ad from a spammer????
> I got a report of a bigevil FP. However, it technically isn't.
> www.masterytv.net is an mlm spammer. No doubt about it. They have sent UCE
> and UBE to users of my company who did NOT optin or signup for their
emails.
> I'll pull up spams if you doubt me, which I don't think you will :)
>
> So why the reported FP? Well they have an advertisement in a legit signup
> ham. Granted it was one of those fruity dailyinbox.com chicken soup for
the
> soul which was 90% ads. But they have never spammed a user here.
>
> So what to do? If every spammer in bigevil was to get a legit sender to
take
> an ad from them, then they would all be FPs? I can't bow down to that!
More
> likely the users who dailyinbox.com "Chicken oup for the soul" should
> contact dailyinbox.com and tell them they are getting marked as spam
because
> of someone they are advertising....a spammer!
>
> Does that make sense? I'm I becoming a hardened and jaded hard @zz like
the
> guys on SPAM-L? ;)
>
> Chris Santerre
> System Admin and SA Custom Rules Emporium keeper
> http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
> 'It is not the strongest of the species that survives,
> not the most intelligent, but the one most responsive to change.'
> Charles Darwin
>
RE: When subscribe to ham uses an ad from a spammer????
Posted by David Hooton <dj...@platformhosting.com>.
FWIW we nuke the chicken soup list anyway :)
Regards,
David Hooton
Senior Partner
Platform Hosting
www.platformhosting.com
> -----Original Message-----
> From: Chris Santerre [mailto:csanterre@MerchantsOverseas.com]
> Sent: Tuesday, 2 March 2004 3:11 AM
> To: Spamassassin-Talk (E-mail)
> Subject: When subscribe to ham uses an ad from a spammer????
>
> I got a report of a bigevil FP. However, it technically isn't.
> www.masterytv.net is an mlm spammer. No doubt about it. They have sent UCE
> and UBE to users of my company who did NOT optin or signup for their
> emails.
> I'll pull up spams if you doubt me, which I don't think you will :)
>
> So why the reported FP? Well they have an advertisement in a legit signup
> ham. Granted it was one of those fruity dailyinbox.com chicken soup for
> the
> soul which was 90% ads. But they have never spammed a user here.
>
> So what to do? If every spammer in bigevil was to get a legit sender to
> take
> an ad from them, then they would all be FPs? I can't bow down to that!
> More
> likely the users who dailyinbox.com "Chicken oup for the soul" should
> contact dailyinbox.com and tell them they are getting marked as spam
> because
> of someone they are advertising....a spammer!
>
> Does that make sense? I'm I becoming a hardened and jaded hard @zz like
> the
> guys on SPAM-L? ;)
>
> Chris Santerre
> System Admin and SA Custom Rules Emporium keeper
> http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
> 'It is not the strongest of the species that survives,
> not the most intelligent, but the one most responsive to change.'
> Charles Darwin
>
> ========================================================================
> Pain free spam & virus protection by: www.mailsecurity.net.au
> Forward undetected SPAM to: spam@mailsecurity.net.au
> ========================================================================
========================================================================
Pain free spam & virus protection by: www.mailsecurity.net.au
Forward undetected SPAM to: spam@mailsecurity.net.au
========================================================================