You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michael Monnerie <mi...@it-management.at> on 2008/05/13 16:06:08 UTC
Re: German Spam
On Mittwoch, 30. Mai 2007 Sebastian Wiesinger wrote:
> It's a nice ruleset but we had a major problem with it. RDJ pulled
> in an update which contained these lines:
Sorry for that problem, and sorry for only answering now. I'd been busy
on some private problems, and hope to get into this list more often
again. In case of problems with the ZMI_GERMAN rulesets, please contact
the e-mail address listed in that file - I read that more often than
this list.
I wish more people would use the ZMI_GERMAN ruleset, and contribute to
it. Our servers are very heavily Anti-SPAM now, and I didn't get german
some for quite some time that would have passed our filters, so
inclusion of new spam is slow now. So, please report spam to me
directly.
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0676/846 914 666 .network.your.ideas.
// PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import"
// Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4
// Keyserver: www.keyserver.net Key-ID: 1C1209B4
RE: German Spam
Posted by Giampaolo Tomassoni <g....@libero.it>.
> -----Original Message-----
> From: Michael Monnerie [mailto:michael.monnerie@it-management.at]
> Sent: Monday, May 26, 2008 11:33 AM
> To: users@spamassassin.apache.org
> Subject: Re: German Spam
>
> On Montag, 26. Mai 2008 Giampaolo Tomassoni wrote:
> > Why not open a specific ruleset at SARE
> > (http://www.rulesemporium.com).
>
> I talked to them in 2005, but they didn't want it because they don't
> have any native german dev. So I created a separate ruleset.
>
> > Some rules against German spam would be useful also in other
> > countries as well. I'm from Italy, in example, and occasionally my
> > MXes get a spam in German language.
>
> You're free to use it. How to get it:
> # SpamAssassin Channel: 70_zmi_german.cf.zmi.sa-update.dostech.net
Got it!
Thanks,
Giampaolo
> # Also via RDJ (RulesDuJour) as: ZMI_GERMAN
> # RDJ is available at
> http://www.exit0.us/index.php?pagename=RulesDuJour
> # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf
>
> mfg zmi
> --
> // Michael Monnerie, Ing.BSc ----- http://it-management.at
> // Tel: 0676/846 914 666 .network.your.ideas.
> // PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import"
> // Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4
> // Keyserver: www.keyserver.net Key-ID: 1C1209B4
Re: German Spam
Posted by Michael Monnerie <mi...@it-management.at>.
On Montag, 26. Mai 2008 Giampaolo Tomassoni wrote:
> Why not open a specific ruleset at SARE
> (http://www.rulesemporium.com).
I talked to them in 2005, but they didn't want it because they don't
have any native german dev. So I created a separate ruleset.
> Some rules against German spam would be useful also in other
> countries as well. I'm from Italy, in example, and occasionally my
> MXes get a spam in German language.
You're free to use it. How to get it:
# SpamAssassin Channel: 70_zmi_german.cf.zmi.sa-update.dostech.net
# Also via RDJ (RulesDuJour) as: ZMI_GERMAN
# RDJ is available at http://www.exit0.us/index.php?pagename=RulesDuJour
# Home: http://sa.zmi.at/rulesets/70_zmi_german.cf
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0676/846 914 666 .network.your.ideas.
// PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import"
// Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4
// Keyserver: www.keyserver.net Key-ID: 1C1209B4
RE: German Spam
Posted by Giampaolo Tomassoni <g....@libero.it>.
> -----Original Message-----
> From: Michael Monnerie [mailto:michael.monnerie@it-management.at]
> Sent: Monday, May 26, 2008 9:16 AM
> To: users@spamassassin.apache.org
> Subject: Re: German Spam
>
> ...omissis...
>
> I'd be happy about that, and could setup an SVN for that if you'd like.
> I'm not sure my current way to list SPAM is the best, but at least I
> didn't get any feedback about FPs in the last months.
Why not open a specific ruleset at SARE (http://www.rulesemporium.com).
Some rules against German spam would be useful also in other countries as
well. I'm from Italy, in example, and occasionally my MXes get a spam in
German language.
Giampaolo
> mfg zmi
> --
> // Michael Monnerie, Ing.BSc ----- http://it-management.at
> // Tel: 0676/846 914 666 .network.your.ideas.
> // PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import"
> // Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4
> // Keyserver: www.keyserver.net Key-ID: 1C1209B4
Re: German Spam
Posted by Michael Monnerie <mi...@it-management.at>.
On Sonntag, 18. Mai 2008 Karsten Bräckelmann wrote:
> I used to use it, but dropped it quite a while ago when it didn't hit
> on *my* particular German spam any longer.
The hard thing for me is to tell if a certain spam could pass through
other people's filters. We're having a heavy anti spam setup, and
almost nothing passes through. Some honeypots addresses are whitelisted
and receive spam, but almost all of it is recognised from the
beginning. And I try to only write rules for german text that is
previously not recognised.
It would be nice to have all rules for SA (at least their names) in SQL,
and on every hit increase a counter and set the now() timestamp to see
which rules do not get hit anymore. With the actual text file, you
can't tell really, and I cannot drop rules just because I do not get
hits anymore, so I'd need that distributed to see some good stats -
which would mean people should distribute back their stats. Is there
anything similar? I'm currently doing mass-checks, but that doesn't
help me with my rules really, as it only reflects my results.
> During a few weak moments, I even pondered setting up and publishing
> my own German rules, specifically targeting "seriously bad" German
> and phrases. Anyway...
> How to contribute? I might think about that. ;)
I'd be happy about that, and could setup an SVN for that if you'd like.
I'm not sure my current way to list SPAM is the best, but at least I
didn't get any feedback about FPs in the last months.
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0676/846 914 666 .network.your.ideas.
// PGP Key: "curl -s http://zmi.at/zmi.asc | gpg --import"
// Fingerprint: AC19 F9D5 36ED CD8A EF38 500E CE14 91F7 1C12 09B4
// Keyserver: www.keyserver.net Key-ID: 1C1209B4
Re: German Spam
Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Tue, 2008-05-13 at 16:06 +0200, Michael Monnerie wrote:
> I wish more people would use the ZMI_GERMAN ruleset, and contribute to
I used to use it, but dropped it quite a while ago when it didn't hit on
*my* particular German spam any longer.
During a few weak moments, I even pondered setting up and publishing my
own German rules, specifically targeting "seriously bad" German and
phrases. Anyway...
How to contribute? I might think about that. ;)
> it. Our servers are very heavily Anti-SPAM now, and I didn't get german
> some for quite some time that would have passed our filters, so
> inclusion of new spam is slow now. So, please report spam to me
> directly.
guenther
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}