• OT what is META_ATTENDEES_DBSPAM1?

    From Byunghee HWANG@21:1/5 to All on Mon Mar 17 11:40:01 2025
    Hellow there,

    For two days, i had wierd experince at Debian mailing. Actually i send
    mail to [email protected] but that did not return to my
    mailbox. At that time i did try 3 times. Then the third email was
    successful.

    After investigate, i did know something. Some spam rule was so high
    score:

    META_ATTENDEES_DBSPAM1=10

    Why is so high?

    For a while i did googling at debian bugs archive. There were so many
    mails within META_ATTENDEES_DBSPAM1. I would like to know how to bypass
    this.

    Any comments welcome!


    Sincerely, Byunghee from South Korea

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEaLsCNLmTlMu36E8yV1K0yJv5aacFAmfX+8oACgkQV1K0yJv5 aad4Pw//ZsgXo6KqJmOBX21/YsCGupuBYkLJZLyhID7AepTnrfN58yrneIXBBJKO 3rtCsTYYR490C9W4639uuEOAi63zlcr4D4QqJd9p8MtQgtiesvJFhmQRhxDo433r nSCxNwq0C2HocsR7BKFGGte6nwAK8MIw1omvmQ8jq1voCOoqrc/+IAyhubJ1Ygc8 rJq6T+T8Ipqw6vQmPA6PdB/krASyWidX6AB2xm4cbzymKcOcLc1Zgy4Lw1ogfjpq hb4Atz0c1tQzoqVhSuX2q/I/qu9S4AQQ+l/bP1HyAsa1MGfWBElyzewpo9/luHCR pVGyUORLZw1bxEmm5S1mDMuFnj1mlTRcs7D3dEeRCOCPO1MX0d4UCEM6zh3+RLHm +AphOEuNubfd8gbXYfQWBcXMArYAFluIi3uLBn7W4vgFCtx6DT5stXczJI8u6uZV YDj0IvVNn0xeK4/KdmR76EuinxjKrFj4lqQowF1TLwJRZD/870Pk5fydIE0Vkz8Q DlyJHl1KfqqXH+U4Pb1uML6NA+999vgddGcfhWYkGn4E+kxymt29sBTJvjFol5c4 hHtoF2lpKpil6tonq5hjFyTqAFTVTgGmftv1hGzPKb3tED/KTyju53q7NJMYylsU yJocTsJ5WHSvT3lB9++m0x4wXu57Vub2fElXOy4+PiWUN3iKanw=
    =17JD
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hanno 'Rince' Wagner@21:1/5 to Byunghee HWANG on Mon Mar 17 12:00:01 2025
    Hi Byunghee!

    On Mon, 17 Mar 2025, Byunghee HWANG wrote:

    After investigate, i did know something. Some spam rule was so high
    score:

    META_ATTENDEES_DBSPAM1=10

    Why is so high?

    because spammer use some words quite often and we use these words as
    detection of spammers.

    mails within META_ATTENDEES_DBSPAM1. I would like to know how to bypass
    this.

    don't use these words. And no, I won't tell them here since spammers
    also use our lists to learn about our filter.

    best regards, Hanno Wagner
    --
    | Hanno Wagner | Member of the HTML Writers Guild | Rince@IRC |
    | Eine gewerbliche Nutzung meiner Email-Adressen ist nicht gestattet! |
    | 74 a3 53 cc 0b 19 - we did it! | Generation @ | Fachbegriffe der Informatik : Verdeckter Fehler
    Siemens hat mitentwickelt.
    J�rg Pechau

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonathan Dowland@21:1/5 to Hanno 'Rince' Wagner on Mon Mar 17 13:10:01 2025
    On Mon Mar 17, 2025 at 10:49 AM GMT, Hanno 'Rince' Wagner wrote:
    because spammer use some words quite often and we use these words as detection of spammers.

    Looking at e.g. <[email protected]> which has
    almost no words in it, yet has META_ATTENDEES_DBSPAM1=10; can you
    confirm that the rule means the sender has used said bad words in *older mail*?

    In which case, do they "age out" of this particular test at any point?

    Thanks,

    --
    Please do not CC me for listmail.

    👱🏻 Jonathan Dowland
    [email protected]
    🔗 https://jmtd.net

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hanno 'Rince' Wagner@21:1/5 to Jonathan Dowland on Mon Mar 17 13:30:01 2025
    Hi Jonathan,

    On Mon, 17 Mar 2025, Jonathan Dowland wrote:

    Looking at e.g. <[email protected]> which has almost no words in it, yet has META_ATTENDEES_DBSPAM1=10; can you confirm that the
    rule means the sender has used said bad words in *older mail*?

    I can only say that you are correct, that here you have META_ATTENDEES_DBSPAM1=10, but you _also_ have rules in his favour,
    like the Whitelist and the Bayes-Filter.

    In which case, do they "age out" of this particular test at any point?

    Believe me, this rule won't be aging out since we still see mails
    with these keywords at least twice a day..

    best regards, Hanno Wagner
    --
    | Hanno Wagner | Member of the HTML Writers Guild | Rince@IRC |
    | Eine gewerbliche Nutzung meiner Email-Adressen ist nicht gestattet! |
    | 74 a3 53 cc 0b 19 - we did it! | Generation @ | Fachbegriffe der Informatik : Chef
    Jemand, der ohne Plan von der Sache unsinnige Anweisungen gibt, die Erfolge f�r
    sich reklamiert und die Katastrophen an �die Techniker� weitergibt. Alexander Schreiber

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Byunghee HWANG =?UTF-8?Q?=28=ED=99=@21:1/5 to Hanno 'Rince' Wagner on Tue Mar 18 06:40:02 2025
    Hellow Hanno,

    On Mon, 2025-03-17 at 13:28 +0100, Hanno 'Rince' Wagner wrote:
    Hi Jonathan,

    On Mon, 17 Mar 2025, Jonathan Dowland wrote:

    Looking at e.g. <[email protected]> which has
    almost no
    words in it, yet has META_ATTENDEES_DBSPAM1=10; can you confirm
    that the
    rule means the sender has used said bad words in *older mail*?

    I can only say that you are correct, that here you have META_ATTENDEES_DBSPAM1=10, but you _also_ have rules in his favour,
    like the Whitelist and the Bayes-Filter.

    In which case, do they "age out" of this particular test at any
    point?

    Believe me, this rule won't be aging out since we still see mails
    with these keywords at least twice a day..


    OK man, you are nice guy, thanks!


    Sincerely, Byunghee from South Korea

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEaLsCNLmTlMu36E8yV1K0yJv5aacFAmfZBaMACgkQV1K0yJv5 aaf1qRAAipm7RDiOn6x4iaEQjBFG5nLrb/aNt3Q19/djM4UTlqh/4pr5ehk3Oxh5 KBPsZMt/cNrSX/3pe3e80ZHc1Vs+fOv+hPTnMF109xwIBsUC1qrBtesB5q3GaBuT LOQmcixek0fy2ipH6rMs+Gyx53DTCr3LbR52uLUbHTimBbtNZa1yugkfH7NSVE+J igC7iwwO11YxBq8ioGP4/Zr4ZR/gB78yiAiZPBT6j8eXftRIo1VE2qhN8xlzUfDp WFt0bYBWRk1iZg33dkDYgflOjxVAf76XY0oSA0eOjBiuspuFb1rwoQhL9ekaj5Tb R8cIIYex8XzFLbGmUynLTXAoHcapNeWTZlXNbNFc1IepVCrL34+zHyy4rtIP9zqW lSCoOOMaEOCmPie8zKTwHUaSPXtqkwtxNbv3Y4ZJXEAfKEo6nITvoV0zmZZM4Coq nJcrTnepYJrVvJPirjHGwfFPOWWOhN5id7T9sVaaJ1W3flYklSxmh/COwap1dJPR 8+5DsrYrAt70Q4aS8L+oaorz24n3mi78OrJdwQzKmsT8KOVztR8ZHDanV41GXcwh Xp414FUn4T6oG/5gwEUJTaBbyo0AJ9kAwtoVEM93CoCHlGg4yyyysr5LBxwLVVdr rxXgoRioBPHrWyFyIRNys2Jy0ZFGq4STp139xEPpc/jLdLibd4Q=
    =6vh2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)