From: UnixOS2 Archive To: "UnixOS2 Archive" Date: Thu, 20 Mar 2003 05:00:30 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600 Subject: [UnixOS2_Archive] No. 77 ************************************************** Wednesday 19 March 2003 Number 77 ************************************************** Subjects for today 1 Re: Bogofilter : Dave and Natalie" 2 crypt() in Perl : John Poltorak 3 Bogofilter : John Poltorak 4 Re: crypt() in Perl : Lyn St George" 5 Re: Bogofilter : John Poltorak 6 Re: Bogofilter : Bart van Leeuwen" 7 Re: Bogofilter : Yuri Dario" 8 Re: Bogofilter : John Poltorak 9 Re: stdint.h : Henry Sobotka 10 Re: stdint.h : Henry Sobotka 11 stdint.h : John Poltorak 12 Re: stdint.h : John Poltorak **= Email 1 ==========================** Date: Thu, 20 Mar 2003 08:16:00 -0800 From: "Dave and Natalie" Subject: Re: Bogofilter On Thu, 20 Mar 2003 15:50:56 +0100 (CET), Yuri Dario wrote: >>No you misunderstand how the mechanism works. Milter provides an API to >>the mail transaction itself, so your SMTP server can refuse to accept the >>mail from the remote server. This is the best time to identify spam an >>block it. > >this is depending on smtp server behaviour: e.g. with IPS is it possible to reject mail while the >SMTP connection is still open. > >But I don't suggest this way: since bogofilter (and others too) are based on probabilistic >message analisys, they can be wrong and mark good messages as spam. If you setup your >smtp server to reject mail immediately, you will get chances to reject also good messages. I'd have to second this. I've been using SpamAssassin for a couple of months. It stops about 98% of my spam and also blocked a couple of things I'd signed up for. Easy to fix with white lists. But it did also block an important mail from my ISP which I was lucky to catch. Now I go thru my junk folder before deleting my spam. Dave **= Email 2 ==========================** Date: Thu, 20 Mar 2003 09:53:57 +0000 From: John Poltorak Subject: crypt() in Perl In order to have a crypt() capable Perl, do I simply need to build gnuufc before building Perl? Is Perl generally built with crypt() on most platforms? -- John **= Email 3 ==========================** Date: Thu, 20 Mar 2003 12:41:57 +0000 From: John Poltorak Subject: Bogofilter I see Bogofilter has been uploaded to Hobbes:- http://hobbes.nmsu.edu/pub/incoming/bogofilter-0.11.1.3.zip Has anyone actaully got it set up? I'm currently looking at various ways of blocking spam and this must be one of the candidates. along with SpamAssassin. However I've just recently come across Milter which works in conjuction with Sendmail and provides opportinites of filtering mail while it is being received by the server rather than been delivered to a mailbox. Unfortunately this means getting an updated Sendmail and I've found it impossible to rebuild the latest Sendmail port. There is a really good overview of Milter here:- http://www.roaringpenguin.com/slides/milter.pdf It would be great to be able to try this. -- John **= Email 4 ==========================** Date: Thu, 20 Mar 2003 13:36:16 +0000 From: "Lyn St George" Subject: Re: crypt() in Perl On Thu, 20 Mar 2003 09:53:57 +0000, John Poltorak wrote: > >In order to have a crypt() capable Perl, do I simply need to build gnuufc >before building Perl? Essentially, yes >Is Perl generally built with crypt() on most platforms? Yes, as it is universally used for reading passwords. > >-- >John > > > > - Cheers Lyn St George +--------------------------------------------------------------------------------- + http://www.zolotek.net .. eCommerce hosting, consulting + http://www.os2docs.org .. some 'How To' stuff ... +---------------------------------------------------------------------------------- **= Email 5 ==========================** Date: Thu, 20 Mar 2003 13:43:29 +0000 From: John Poltorak Subject: Re: Bogofilter On Thu, Mar 20, 2003 at 02:11:00PM +0100, Bart van Leeuwen wrote: > > On 20-03-2003 13:41:57 owner-os2-unix wrote: > > >I see Bogofilter has been uploaded to Hobbes:- > > > >http://hobbes.nmsu.edu/pub/incoming/bogofilter-0.11.1.3.zip > > > >Has anyone actaully got it set up? > I use it with weasel as a gateway to my Domino Server, it simply rocks ! What do you use Domino for? I thought it was a mail server. As for bogofilter, how do you set it up? > >I'm currently looking at various ways of blocking spam and this must be > >one of the candidates. along with SpamAssassin. > > > >However I've just recently come across Milter which works in conjuction > >with Sendmail and provides opportinites of filtering mail while it is > >being received by the server rather than been delivered to a mailbox. > bogofilter does the same in conjuction with weasel, it simply allows you to > reject mail before it is in any mailbox No you misunderstand how the mechanism works. Milter provides an API to the mail transaction itself, so your SMTP server can refuse to accept the mail from the remote server. This is the best time to identify spam an block it. When you are running bogofilter with weasel, then you are attempting to block spam from mailboxes *after* the server has already accepted it. IMV this is the wrong time to block it. In fact, you are not really blocking it, but discarding it after it has arrived. > Bart -- John **= Email 6 ==========================** Date: Thu, 20 Mar 2003 14:11:00 +0100 From: "Bart van Leeuwen" Subject: Re: Bogofilter On 20-03-2003 13:41:57 owner-os2-unix wrote: >I see Bogofilter has been uploaded to Hobbes:- > >http://hobbes.nmsu.edu/pub/incoming/bogofilter-0.11.1.3.zip > >Has anyone actaully got it set up? I use it with weasel as a gateway to my Domino Server, it simply rocks ! >I'm currently looking at various ways of blocking spam and this must be >one of the candidates. along with SpamAssassin. > >However I've just recently come across Milter which works in conjuction >with Sendmail and provides opportinites of filtering mail while it is >being received by the server rather than been delivered to a mailbox. bogofilter does the same in conjuction with weasel, it simply allows you to reject mail before it is in any mailbox Bart **= Email 7 ==========================** Date: Thu, 20 Mar 2003 15:50:56 +0100 (CET) From: "Yuri Dario" Subject: Re: Bogofilter Hi, >No you misunderstand how the mechanism works. Milter provides an API to >the mail transaction itself, so your SMTP server can refuse to accept the >mail from the remote server. This is the best time to identify spam an >block it. this is depending on smtp server behaviour: e.g. with IPS is it possible to reject mail while the SMTP connection is still open. But I don't suggest this way: since bogofilter (and others too) are based on probabilistic message analisys, they can be wrong and mark good messages as spam. If you setup your smtp server to reject mail immediately, you will get chances to reject also good messages. The best way is to mark messages with the X-Bogosity header. Going with immediate reject, you should add more logic to the filter, to be able to notify the destination user (and the sender) of the rejection. Quite complex and still needs to filter notification messages, so it is better to mark messages and filter them. Bye, Yuri Dario /* * member of TeamOS/2 - Italy * http://www.quasarbbs.net/yuri * http://www.teamos2.it * http://www.opera.com/os2/ */ **= Email 8 ==========================** Date: Thu, 20 Mar 2003 16:06:43 +0000 From: John Poltorak Subject: Re: Bogofilter On Thu, Mar 20, 2003 at 03:50:56PM +0100, Yuri Dario wrote: > Hi, > > >No you misunderstand how the mechanism works. Milter provides an API to > >the mail transaction itself, so your SMTP server can refuse to accept the > >mail from the remote server. This is the best time to identify spam an > >block it. > > this is depending on smtp server behaviour: e.g. with IPS is it possible to reject mail while the > SMTP connection is still open. > > But I don't suggest this way: since bogofilter (and others too) are based on probabilistic > message analisys, they can be wrong and mark good messages as spam. If you setup your > smtp server to reject mail immediately, you will get chances to reject also good messages. > > The best way is to mark messages with the X-Bogosity header. > > Going with immediate reject, you should add more logic to the filter, to be able to notify the > destination user (and the sender) of the rejection. Quite complex and still needs to filter > notification messages, so it is better to mark messages and filter them. Of course, this all depends on the nature of the spam, and identifying it as such. Some mail is obviously spam, some may be completely valid mail, but in my experience if I ever check any mail which has an X-Mailer of Diffondicool it is always spam. It would be nice to reject all mail which has this X-Mailer flag or any other easily distinguishable characteristics during the SMTP transaction. > > Bye, > > Yuri Dario > > /* > * member of TeamOS/2 - Italy > * http://www.quasarbbs.net/yuri > * http://www.teamos2.it > * http://www.opera.com/os2/ > */ -- John **= Email 9 ==========================** Date: Thu, 20 Mar 2003 18:32:49 -0500 From: Henry Sobotka Subject: Re: stdint.h John Poltorak wrote: > > The most recent release of crypt (gnuufc) requires the header stdint.h. > > Has anyone come across it? I don't see it in EMX or Posix/2. And just what manner of evil have you been plying in dark corners of the universe that google is no longer your friend? h~ **= Email 10 ==========================** Date: Thu, 20 Mar 2003 19:34:15 -0500 From: Henry Sobotka Subject: Re: stdint.h John Poltorak wrote: > > Google is great in many respects, but in this instance it hasn't come up > with anything like a URl where I can grab it. google.ca (on 1-10 of ~18K) turns up: http://remotesensing.org/cgi-bin/cvsweb.cgi/catl/boost/stdint.h?sortby=date though from http://www.opengroup.org/onlinepubs/007904975/basedefs/stdint.h.html it's clearly a system/machine-specific file that can't just be grabbed and dropped into include, so you might want to play with http://ac-archive.sourceforge.net/gstdint/ to generate a valid one. Also, here I see (gnu) libc/sysdeps/generic/stdint.h (which presumably requires tweaking for i386). h~ **= Email 11 ==========================** Date: Thu, 20 Mar 2003 21:17:50 +0000 From: John Poltorak Subject: stdint.h The most recent release of crypt (gnuufc) requires the header stdint.h. Has anyone come across it? I don't see it in EMX or Posix/2. -- John **= Email 12 ==========================** Date: Thu, 20 Mar 2003 23:46:31 +0000 From: John Poltorak Subject: Re: stdint.h On Thu, Mar 20, 2003 at 06:32:49PM -0500, Henry Sobotka wrote: > John Poltorak wrote: > > > > The most recent release of crypt (gnuufc) requires the header stdint.h. > > > > Has anyone come across it? I don't see it in EMX or Posix/2. > > And just what manner of evil have you been plying in dark corners of the > universe that google is no longer your friend? Google is great in many respects, but in this instance it hasn't come up with anything like a URl where I can grab it. > h~ -- John