[Bug 4045] New: Detection of "obvious" spam

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=4045

           Summary: Detection of "obvious" spam
           Product: Spamassassin
           Version: 2.60
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Score Generation
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: amspammed@oil4lessllc.com


Every time i see random characters in name field of return path,
i find that the e-mail is SPAM.
  *Please* modify your software to sense this glaring attribute.
  Three or more consonants in a row, with table lookup for the three 
consonants exceptions (ie: Tomaschewski).
  As far as i am concerned, this attribute should be scored with 12 points.
**
  It might be helpful to allow a different number of points to each scored 
attribute and that the "learning" process change that weighting.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4045] Detection of "obvious" spam

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=4045

henry@stern.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX



------- Additional Comments From henry@stern.ca  2004-12-22 07:28 -------
This is prone to false positives and spammers will just adapt and never put
three consonants in a row.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4045] Detection of "obvious" spam

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=4045





------- Additional Comments From henry@stern.ca  2004-12-23 06:46 -------
> Unfortunately, SpamAssasin is not one of them.
>   Between one third and one half of the SPAM we get uses
> randumb (pun intended) characters in the name field of the
> return-path.
>   I quickly found that it would be easier to look for multiple
> consonants as most had 4 or more in a row, and only a few had
> only 3 in a row.
>   And i agree concerning Polish and similar languages, so i added
> the suggestion of a table lookup for exceptions.
>   An alternate route may be an algorithm to detect random
> characters - to be used only in the 3-character case.
>   We have yet to see even one "false positive" that was used
> as one excuse to not even try; the second one was "spammers would
> only adapt".
>   So without this screening, they most certainly will *not* adapt.

If you feel that this rule will be effective for your site's e-mail, you are
free to add such a rule to your local configuration.  However, I will point out
that it will hit your own e-mail address (amspammed@oil4lessllc.com) four times:
ams ssl sll llc.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 4045] Detection of "obvious" spam

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=4045





------- Additional Comments From lwilton@earthlink.net  2004-12-22 18:23 -------
Subject: Re:  Detection of "obvious" spam

And in any case there are a handful of available rulesets that catch this
sort of thing quite nicely.

Of course, they are less useful on Polish, Russian, and similar languages
which are vowel-deprived.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.