Re: [SAtalk] Maillog analysis

2003-06-03 Thread Rich Puhek
Mark wrote: A few weeks ago I thought of an interesting new "statistical" way of fighting spam. Having collected a few weeks worth of maillog data (about 500 MB), I wrote a small Perl script, matching IP addresses by the following simple rule (in words): "Look at SMTP connections, and consider all

Re: [SAtalk] Maillog analysis

2003-05-31 Thread listuser
On Fri, 30 May 2003, Mark wrote: > MIMEDefang would, indeed, be an excellent place to implement this, as, on > top of spamd, it gives you a bit of extra info on the SMTP session. :) > > Come to think of it, your implementation of this idea is actually a LOT > better than my running a 'sec' post-p

Re: [SAtalk] Maillog analysis

2003-05-30 Thread Mark
- Original Message - From: "Michael Sims" <[EMAIL PROTECTED]> To: "Mark" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, May 30, 2003 3:31 AM Subject: Re: [SAtalk] Maillog analysis > Quoting Mark <[EMAIL PROTECTED]>: > > >

Re: [SAtalk] Maillog analysis

2003-05-30 Thread Michael Sims
Quoting Mark <[EMAIL PROTECTED]>: > "Look at SMTP connections, and consider all IP addresses spam that, in one > session, deliver to 4 or more local recipients simultaneously." This gave me a good idea for a test I could run in MIMEDefang. I have a small wrapper in my mimedefang-filter around t

Re: [SAtalk] Maillog analysis

2003-05-30 Thread Justin Mason
Mark said: > A few weeks ago I thought of an interesting new "statistical" way of > fighting spam. Having collected a few weeks worth of maillog data (about 500 > MB), I wrote a small Perl script, matching IP addresses by the following > simple rule (in words): > > "Look at SMTP connections, and

[SAtalk] Maillog analysis

2003-05-29 Thread Mark
A few weeks ago I thought of an interesting new "statistical" way of fighting spam. Having collected a few weeks worth of maillog data (about 500 MB), I wrote a small Perl script, matching IP addresses by the following simple rule (in words): "Look at SMTP connections, and consider all IP addresse