| Andrew Cooke | Contents | Latest | RSS | Twitter | Previous | Next

C[omp]ute

Welcome to my blog, which was once a mailing list of the same name and is still generated by mail. Please reply via the "comment" links.

Always interested in offers/projects/new ideas. Eclectic experience in fields like: numerical computing; Python web; Java enterprise; functional languages; GPGPU; SQL databases; etc. Based in Santiago, Chile; telecommute worldwide. CV; email.

Personal Projects

Lepl parser for Python.

Colorless Green.

Photography around Santiago.

SVG experiment.

Professional Portfolio

Calibration of seismometers.

Data access via web services.

Cache rewrite.

Extending OpenSSH.

Last 100 entries

Re: Python's sad, unimaginative Enum; Some explanation; Printing binary trees sideways; About "Python's sad, unimaginative Enum"; Atoms in python; Some good feedback here; Frustration Understood; I agree with you #nt; What would be imaginative?; Re: Enum; this is fucking useless; Enum; Python's sad, unimaginative Enum; Possible Fix; Work, Exhaustion, Vacation; VirtualBox with Centos 6.3 to 6.4, client; Matasano - Programming Lessons Learned; PDF to HTML; Alternate Substitution; Why RSA Works; Trigger; Dreaming of Death; Example: Tracing; Using Coroutines In Protocol Simulations; Python 3.3 Only; Pure Python SHA1 and MD4 Implementations; Ubuntu on VirtualBox; Starting TOR as a service on OpenSuse 12.3; 1001 Albums; Using fail2ban on OpenSuse 12.3; PPPoE on OpenSuse 12.3; Good Article on Unified Physics; It's Police (Carabineros); Linux Software for Listening to and Exploring Music; Android is Pretty Bad; Lucky Number; 3D Printing for Casting; Cover Art for MPDroid; Who'd a thought the French were so bigoted?; PS Input Signal; Small Problem with Roksan K2 Amp; Roksan K2 Amp + ATC SCM7 Speakers; Do What Makes Sense; Re: Arguing About Tests, Still; Arguing About Tests, Still; Images; Good Article on NY Drummers; Related Bug Report; Getting Python 3.3 and Virtualenv Working in OpenSuse 12.3; How I Am; Awesome video about digital audio; The Difference Between Dimensional and Normalized Databases; The rise of the new Chinese bogeyman; Updated Syntax; Very First Steps to C-ORM; The Ideal User Interface For Music Exploration; Can The Republicans Be Saved?; Rate Limiting Calls to EchoNest; Mods to Cache; Comparing UYKFG and UYKFD/E/F; Someone Else is Concerned; EchoNest-based Playlist Generator for MPD; Example Voting Results; A Heavyweight Python Cache; Identifying Artists with EchoNest; Notes on Pregalex / Pregabalina / Lyrica; The Neil Cowley Trio; Drake - Make for Data; A Reliable Python Web Service; Useful Python Date/Time Library?; Need to Sleep, But this is Good; Command Line Set Difference; Little Details...; Linux Command Line Tricks; AutoTools Tutorial; Hangman Tactics; A Tor Proxy Embedded In A Web Page; Tree (Nested Dicts) in Python; Sleeping at Parties; I Know Someone Who Hurts Other People; Light and Tea; Description of the LCS35 Time Capsule Crypto-Puzzle; Re: I can relate to that ...; I can relate to that ...; Re: It's 2012 Why Does My IDE Suck?; My Own Alternative Medicine; Nice explanation of SVM; Why and How Writing Crypto is Hard; Re: It's 2012 Why Does My IDE Suck?; Incremental Regular Expressions; BBC Map Confused at Pole; Social Media: Ground Zero in the Culture War; My Visit to the Psycho Doc; Learning Modern 3D Graphics Programming; Hope you got some crackers to go with the cheese; Re: But how easy would it be ...; But how easy would it be ...; Powerline Freq Fingerprinting of Audio; The Folly of Scientism; Cheese - Because You're Going to Die Anyway; Another GPU Success - PyCUDA, Cross-Correlations

© 2006-2013 Andrew Cooke (site) / post authors (content).

Enabling Network Spam Detection on SuSE

From: "andrew cooke" <andrew@...>

Date: Mon, 15 Jan 2007 11:34:02 -0300 (CLST)

I was revising my email processing (which uses procmail to combine a
variety of different checks, including DNS lookup, Vaipul's Razor, and
Spam Assassin) and realised that things could be much simpler - these days
(I've been using my procmail script for years) Spam Assassin can include
all the other sites, including those based on URL lookup (URL in the email
message are checked against a database - more reliable than IP checks
because it more directly identifies the sender).

To enable network based checks on SuSE you need to edit
/etc/sysconfig/spamd to remove "-L":

## Path:           Network/Mail/Spamassassin
## Description:    Arguments for the spam daemon
## Type:           string
## Default:        "-d -c -L"
## ServiceRestart: spamd
#
# The arguments passed to spamd.
# See spamd(1) man page.
# Default is "-d -c -L"
SPAMD_ARGS="-d -c"

And then that .procmail needs now for spam checking is:

:0fw
* < 100000
| spamc

:0
* ^X-Spam-Status: Yes
.Trash.spam-assassin/

And here's a typical spam header after processing - you can see that
various DNS and URL blacklists were used [I've had to edit the URLs with
.xxx in the log below as otherwise this email too is blocked...]:

Content analysis details:   (25.6 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 3.6 RATWARE_RCVD_PF        Bulk email fingerprint (Received PF) found 0.3
SUBJ_BUY               Subject line starts with Buy or Buying 1.3
INFO_TLD               URI: Contains an URL in the INFO top-level domain
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 0.4 HTML_30_40             BODY: Message is 30% to 40% HTML
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.9 DNS_FROM_RFC_BOGUSMX   RBL: Envelope sender in
                            bogusmx.rfc-ignorant.org
 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see
<http://www.spamcop.net/bl.shtml?208.104.241.246>]
 1.6 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: wranyw.com.xxx moully.cd.xxx]
 3.8 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                            [URIs: wranyw.com.xxx wowmojer.com.xxx
dutyrun.info.xxx] [moully.cd.xxx quiok.hk.xxx]
 4.1 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                            [URIs: wranyw.com.xxx wowmojer.com.xxx
dutyrun.info.xxx] [moully.cd.xxx quiok.hk.xxx]
 2.1 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: moully.cd.xxx]
 3.0 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: wranyw.com.xxx]
 4.5 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: wranyw.com.xxx wowmojer.com.xxx
moully.cd.xxx] [quiok.hk.xxx]

Andrew

Comment on this post