[FLORA.org HelpDesk] spam processing

[Krishna E. Bera]

1. as a mailing list owner, i do not want to receive messages
of the type appended below.

2. the points assigned to a Microsoft executable attachment
should be enough to discard the entire email,
when it is addressed to a mailing list.



Begin forwarded message:

Date: Wed, 14 Apr 2004 10:25:37 -0400
From: ***@flora.org
To: owner-***@flora.org
Subject: Re: Your document


WARNING: This e-mail has been altered by MIMEDefang. Following this
paragraph are indications of the actual changes made. For more
information about your site's MIMEDefang policy, contact
FLORA Community Consulting <***@flora.ca>. For more information about MIMEDefang, see:

http://www.roaringpenguin.com/mimedefang/enduser.php3

An attachment named document_owner-nowar.doc .scr was removed from this document as it
constituted a security hazard. If you require this document, please contact the sender and arrange an alternate means of receiving it.

[SpamAssassinReport.txt text/plain (1224 bytes)]
Spam detection software, running on the system "bangalore.flora.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Your document is attached. [skipped
application/octet-stream attachment] [...]

Content analysis details: (6.4 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.3 NO_REAL_NAME From: does not include a real name
0.1 MICROSOFT_EXECUTABLE RAW: Message includes Microsoft executable program
3.7 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
0.6 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
0.9 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
0.7 PRIORITY_NO_NAME Message has priority setting, but no X-Mailer

-
Message part of the FLORA.org HelpDesk: http://www.flora.org/flora/help/

[Russell McOrmond]

Post by Krishna E. Bera
1. as a mailing list owner, i do not want to receive messages
of the type appended below.

You received the messages without the warning in the past, so receiving
these messages is nothing new. You can now detect the warning and do
something with it in your own local email software.

Post by Krishna E. Bera
2. the points assigned to a Microsoft executable attachment
should be enough to discard the entire email,
when it is addressed to a mailing list.

Agreed, so send code. There was a suggestion a couple of years ago to
put a PERL filter in front of Majordomo1's resend command that would look
at the message and possibly bounce it back to the sender because of
certain criteria rather than bounce to the list manager.

Nobody has sent me that code, so obviously it was never installed.