From: UnixOS2 Archive To: "UnixOS2 Archive" Date: Fri, 26 Sep 2003 14:11:52 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600 Subject: [UnixOS2_Archive] No. 204 ************************************************** Thursday 25 September 2003 Number 204 ************************************************** Subjects for today 1 Checking for word in a string : John Poltorak 2 Re: Checking for word in a string : Yuri Dario" 3 Re: Checking for word in a string : John Poltorak 4 Re: Checking for word in a string : Adrian Gschwend" 5 Re: Checking for word in a string : Franz Bakan" 6 Re: Checking for word in a string : John Poltorak 7 Re: Checking for word in a string : Adrian Gschwend" 8 Re: Checking for word in a string : Yuri Dario" 9 Re: Checking for word in a string : John Poltorak **= Email 1 ==========================** Date: Fri, 26 Sep 2003 13:58:53 +0100 From: John Poltorak Subject: Checking for word in a string I am trying to figure out a way of using GREP (or anything else) to identify whether the Subject of an email consists of words from this list:- Current Newest Last New Latest Net Network Microsoft Internet Critical Security Patch Update Pack Upgrade Can anyone suggest how it can be done? I believe these words are used in the Subject line of the Swen virus and I'm sure many of you have already come across it many times. -- John **= Email 2 ==========================** Date: Fri, 26 Sep 2003 15:47:03 +0200 (CDT) From: "Yuri Dario" Subject: Re: Checking for word in a string Hi John, >I believe these words are used in the Subject line of the Swen virus and >I'm sure many of you have already come across it many times. give BogoFilter a try: will do this and a lot more :-) Bye, Yuri Dario /* * member of TeamOS/2 - Italy * http://www.os2power.com/yuri * http://www.teamos2.it */ **= Email 3 ==========================** Date: Fri, 26 Sep 2003 15:49:11 +0100 From: John Poltorak Subject: Re: Checking for word in a string On Fri, Sep 26, 2003 at 03:47:03PM +0200, Yuri Dario wrote: > Hi John, > > >I believe these words are used in the Subject line of the Swen virus and > >I'm sure many of you have already come across it many times. > > give BogoFilter a try: will do this and a lot more :-) My preferred option for blocking spam would be to use Milter in combination with Sendmail which would provide a realtime rejection of junk rather than a filter for spam which has already arrived, but I can't get a sufficiently recent version of Sendmail working reliably to even attempt using Milter. I can't get my head around bogofilter. Can it be used as a local delivery agent? I currently use QYPMAIL, which provides all the flexibilty I need, although I keep toying with the idea of PROCMAIL. > Bye, > > Yuri Dario > > /* > * member of TeamOS/2 - Italy > * http://www.os2power.com/yuri > * http://www.teamos2.it > */ -- John **= Email 4 ==========================** Date: Fri, 26 Sep 2003 16:15:04 +0200 (CDT) From: "Adrian Gschwend" Subject: Re: Checking for word in a string On Fri, 26 Sep 2003 15:47:03 +0200 (CDT), Yuri Dario wrote: >give BogoFilter a try: will do this and a lot more :-) Yes unless one thing: The failure messages are not filtered, even if I train bogofilter with them. The problem of the messages are that they are 150k big and this sucks... cu Adrian -- Adrian Gschwend at netlabs.org ktk [a t] netlabs.org ------- Free Software for OS/2 and eCS http://www.netlabs.org **= Email 5 ==========================** Date: Fri, 26 Sep 2003 16:45:40 +0200 (CEST) From: "Franz Bakan" Subject: Re: Checking for word in a string On Fri, 26 Sep 2003 16:15:04 +0200 (CDT), Adrian Gschwend wrote: >Yes unless one thing: The failure messages are not filtered, even if I >train bogofilter with them. The problem of the messages are that they >are 150k big and this sucks... use swendeleter it's on HOBBES/incoming this tiny perlscript deletes the mails on the pop3-server. Works very well here. Regards Franz **= Email 6 ==========================** Date: Fri, 26 Sep 2003 18:44:24 +0100 From: John Poltorak Subject: Re: Checking for word in a string On Fri, Sep 26, 2003 at 06:46:35PM +0200, Adrian Gschwend wrote: > On Fri, 26 Sep 2003 15:50:30 +0100, John Poltorak wrote: > > >It would be nice to stop them arriving on the pop server. > > that's what I do with bogofilter actualy I meant I would actually like to prevent it being accepted by my mail server in the first instance. > cu > > Adrian > > > -- > Adrian Gschwend > at netlabs.org > > ktk [a t] netlabs.org > ------- > Free Software for OS/2 and eCS > http://www.netlabs.org > -- John **= Email 7 ==========================** Date: Fri, 26 Sep 2003 18:46:35 +0200 (CDT) From: "Adrian Gschwend" Subject: Re: Checking for word in a string On Fri, 26 Sep 2003 15:50:30 +0100, John Poltorak wrote: >It would be nice to stop them arriving on the pop server. that's what I do with bogofilter actualy cu Adrian -- Adrian Gschwend at netlabs.org ktk [a t] netlabs.org ------- Free Software for OS/2 and eCS http://www.netlabs.org **= Email 8 ==========================** Date: Fri, 26 Sep 2003 18:54:15 +0200 (CDT) From: "Yuri Dario" Subject: Re: Checking for word in a string Hi, >combination with Sendmail which would provide a realtime rejection >of junk rather than a filter for spam which has already arrived, but I >can't get a sufficiently recent version of Sendmail working reliably to you can use bogofilter also in this way: if you get the main distribution on bogofilter.sf.net, you will find examples for using it directly with MTA agents. Bye, Yuri Dario /* * member of TeamOS/2 - Italy * http://www.os2power.com/yuri * http://www.teamos2.it */ **= Email 9 ==========================** Date: Fri, 26 Sep 2003 20:43:43 +0100 From: John Poltorak Subject: Re: Checking for word in a string On Fri, Sep 26, 2003 at 06:54:15PM +0200, Yuri Dario wrote: > Hi, > > >combination with Sendmail which would provide a realtime rejection > >of junk rather than a filter for spam which has already arrived, but I > >can't get a sufficiently recent version of Sendmail working reliably to > > you can use bogofilter also in this way: if you get the main distribution on bogofilter.sf.net, you > will find examples for using it directly with MTA agents. I've tried looking at bogofilter but my eyes quickly glaze over after a few pages of the docs. It doesn't look very easy to set up at all. Is there any 'quick start' option for simply dealing with something like Swen so that I can at least get something working and progress from there? > > Bye, > > Yuri Dario > > /* > * member of TeamOS/2 - Italy > * http://www.os2power.com/yuri > * http://www.teamos2.it > */ -- John