Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20...
-
Upload
phillip-barber -
Category
Documents
-
view
216 -
download
0
Transcript of Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20...
![Page 1: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/1.jpg)
Filtering Mail with Mail::Audit and Mail::SpamAssassin
Creede Lambardpenguinsinthenight.com
20 August 2002
![Page 2: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/2.jpg)
General Outline:
![Page 3: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/3.jpg)
General Outline:
● How UNIX handles mail
![Page 4: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/4.jpg)
General Outline:
● How UNIX handles mail● A simple understated diatribe against unsolicited
commercial email
![Page 5: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/5.jpg)
General Outline:
● How UNIX handles mail● A simple understated diatribe against unsolicited
commercial email● Why mail filtering is a Good Thingtm
![Page 6: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/6.jpg)
General Outline:
● How UNIX handles mail● A simple understated diatribe against unsolicited
commercial email● Why mail filtering is a Good Thingtm
● If you use Windows . . .
![Page 7: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/7.jpg)
General Outline:
● How UNIX handles mail● A simple understated diatribe against unsolicited
commercial email● Why mail filtering is a Good Thingtm
● If you use Windows . . . ● Using Mail::Audit
![Page 8: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/8.jpg)
General Outline:
● How UNIX handles mail● A simple understated diatribe against unsolicited
commercial email● Why mail filtering is a Good Thingtm
● If you use Windows . . . ● Using Mail::Audit● Using Mail::SpamAssassin
![Page 9: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/9.jpg)
How Unix handles your mail
![Page 10: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/10.jpg)
How Unix handles your mail
![Page 11: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/11.jpg)
How Unix handles your mail
![Page 12: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/12.jpg)
How Unix handles your mail
![Page 13: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/13.jpg)
How Unix handles your mail
![Page 14: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/14.jpg)
How Unix handles your mail
![Page 15: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/15.jpg)
How Unix handles your mail
![Page 16: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/16.jpg)
How Unix handles your mail
![Page 17: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/17.jpg)
How Unix handles your mail
![Page 18: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/18.jpg)
How Unix handles your mail
![Page 20: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/20.jpg)
How Unix handles your mail
Piping to another program:
| vacation
![Page 21: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/21.jpg)
Does this look familiar?
![Page 22: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/22.jpg)
spam
![Page 23: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/23.jpg)
spam
● Unsolicited commercial email
![Page 24: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/24.jpg)
spam
● Unsolicited commercial email– Sent in bulk
![Page 25: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/25.jpg)
spam
● Unsolicited commercial email– Sent in bulk– Directly or indirectly advertises a product or service
![Page 26: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/26.jpg)
spam
● Unsolicited commercial email– Sent in bulk– Directly or indirectly advertises a product or service– Not requested by recipient
![Page 27: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/27.jpg)
spam
● Unsolicited commercial email– Sent in bulk– Directly or indirectly advertises a product or service– Not requested by recipient
● Not necessarily mail you don't want . . .
![Page 28: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/28.jpg)
spam
● Unsolicited commercial email– Sent in bulk– Directly or indirectly advertises a product or service– Not requested by recipient
● Not necessarily mail you don't want . . .– Although for purposes of this presentation we'll treat them
the same.
![Page 29: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/29.jpg)
When Spamtm is acceptable
![Page 30: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/30.jpg)
When Spamtm is acceptable
![Page 31: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/31.jpg)
spam is a Bad Thingtm
![Page 32: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/32.jpg)
spam is a Bad Thingtm
● It shifts the burden of costs to the recipient
![Page 33: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/33.jpg)
spam is a Bad Thingtm
● It shifts the burden of costs to the recipient● It clogs the Net
![Page 34: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/34.jpg)
spam is a Bad Thingtm
● It shifts the burden of costs to the recipient● It clogs the Net● It wastes your time
![Page 35: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/35.jpg)
spam is a Bad Thingtm
● It shifts the burden of costs to the recipient● It clogs the Net● It wastes your time● Items/services advertised through spamming tend to
be of questionable value
![Page 36: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/36.jpg)
spam is a Bad Thingtm
● It shifts the burden of costs to the recipient● It clogs the Net● It wastes your time● Items/services advertised through spamming tend to
be of questionable value● The vast majority of it is fraudulent
![Page 37: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/37.jpg)
Dealing with spam
![Page 38: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/38.jpg)
Dealing with spam
● Ignore it
![Page 39: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/39.jpg)
Dealing with spam
● Ignore it . . . and hope it goes away
![Page 40: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/40.jpg)
Dealing with spam
![Page 41: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/41.jpg)
Dealing with spam
● Ignore it . . . not an option
![Page 42: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/42.jpg)
Dealing with spam
● Ignore it . . . not an option● Just hit Delete . . .
![Page 43: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/43.jpg)
Dealing with spam
● Ignore it . . . not an option● Just hit Delete . . . The damage is already done
![Page 44: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/44.jpg)
Dealing with spam
● Ignore it . . . not an option● Just hit Delete . . . The damage is already done● Filter it as early as possible in its life cycle
![Page 45: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/45.jpg)
Dealing with spam
● Ignore it . . . not an option● Just hit Delete . . . The damage is already done● Filter it as early as possible in its life cycle● Filter it as it's trying to enter your machine
![Page 46: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/46.jpg)
If you use Windows . . .
![Page 47: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/47.jpg)
Mail filtering
![Page 48: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/48.jpg)
Mail filtering
| /home/you/mailfilter
![Page 49: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/49.jpg)
Mail filtering apart from spam filtering
![Page 50: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/50.jpg)
Mail filtering apart from spam filtering
● Separating mailing lists into their own folders
![Page 51: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/51.jpg)
Mail filtering apart from spam filtering
● Separating mailing lists into their own folders● News-to-mail gateways
![Page 52: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/52.jpg)
procmail
![Page 53: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/53.jpg)
procmail
● Advantages:
![Page 54: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/54.jpg)
procmail
● Advantages:– Well-established
![Page 55: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/55.jpg)
procmail
● Advantages:– Well-established– Lots of sample scripts
![Page 56: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/56.jpg)
procmail
● Advantages:– Well-established– Lots of sample scripts
● Disadvantages:
![Page 57: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/57.jpg)
procmail
● Advantages:– Well-established– Lots of sample scripts
● Disadvantages:– Arcane syntax
![Page 58: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/58.jpg)
procmail
● Advantages:– Well-established– Lots of sample scripts
● Disadvantages:– Arcane syntax– Like learning a new language . . .
![Page 59: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/59.jpg)
procmail
● Advantages:– Well-established– Lots of sample scripts
● Disadvantages:– Arcane syntax– Like learning a new language . . .– And it's not Perl!
![Page 60: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/60.jpg)
Mail::Audit
![Page 61: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/61.jpg)
Mail::Audit
● Written by Simon Cozens
![Page 62: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/62.jpg)
Mail::Audit
● Written by Simon Cozens
procmail is nasty. It has a tortuous and complicated recipe format, and I don't like it. I wanted something flexible whereby I could filter my mail using Perl tests.
- Simon Cozens, from the Mail::Audit perldoc
![Page 63: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/63.jpg)
Mail::Audit
● Written by Simon Cozens● Based on audit_mail and deliverlib by Tom
Christiansen
![Page 64: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/64.jpg)
Mail::Audit
● Written by Simon Cozens● Based on audit_mail and deliverlib by Tom
Christiansen● It's Perl!!!!!!!!!!!!!!!
![Page 65: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/65.jpg)
Mail::Audit
● Written by Simon Cozens● Based on audit_mail and deliverlib by Tom
Christiansen● It's Perl!!!!!!!!!!!!!!!● A module, not a standalone program
![Page 66: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/66.jpg)
How Mail::Audit Works
![Page 67: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/67.jpg)
Parsing mail
![Page 68: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/68.jpg)
Parsing mail
● Mail::Internet object
![Page 69: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/69.jpg)
Parsing mail
● Mail::Internet object● Parse by:
![Page 70: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/70.jpg)
Parsing mail
● Mail::Internet object● Parse by:
– From, To or CC lines
![Page 71: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/71.jpg)
Parsing mail
● Mail::Internet object● Parse by:
– From, To or CC lines– Subject
![Page 72: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/72.jpg)
Parsing mail
● Mail::Internet object● Parse by:
– From, To or CC lines– Subject– Absence, presence or content of headers
![Page 73: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/73.jpg)
Parsing mail
● Mail::Internet object● Parse by:
– From, To or CC lines– Subject– Absence, presence or content of headers– Body text
![Page 74: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/74.jpg)
Parsing mail
● Mail::Internet object● Parse by:
– From, To or CC lines– Subject– Absence, presence or content of headers– Body text
● Anything can be parsed
![Page 75: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/75.jpg)
Parsing mail
● Mail::Internet object● Parse by:
– From, To or CC lines– Subject– Absence, presence or content of headers– Body text
● Anything can be parsed– Using Mail::Internet::as_string
![Page 76: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/76.jpg)
Installation
![Page 77: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/77.jpg)
Installation
● Download and install Mail::Audit from CPAN
![Page 78: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/78.jpg)
Installation
# perl -MCPAN -e shell
cpan> install Mail::Audit
![Page 79: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/79.jpg)
Installation
● Download and install Mail::Audit from CPAN● Create .forward file
![Page 80: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/80.jpg)
Installation
| /home/creede/mailfilter
![Page 81: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/81.jpg)
Installation
● Download and install Mail::Audit from CPAN● Create .forward file● Create filter file
![Page 82: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/82.jpg)
Installation
#!/usr/bin/perl
use Mail::Audit;
my $mail = new Mail::Audit;
![Page 83: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/83.jpg)
Installation
#!/usr/bin/perl
use Mail::Audit;
my $mail = new Mail::Audit;
my $from = $mail->from;
my $to = $mail->to;
my $cc = $mail->cc;
my $subject = $mail->subject;
![Page 84: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/84.jpg)
Installation
#!/usr/bin/perl
use Mail::Audit;
my $mail = new Mail::Audit;
my $from = $mail->from;
my $to = $mail->to;
my $cc = $mail->cc;
my $subject = $mail->subject;
my $_body = $mail->body;
my $body = join(“\n”, @$body);
![Page 85: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/85.jpg)
Installation
#!/usr/bin/perl
use Mail::Audit;
my $mail = new Mail::Audit;
my $from = $mail->from;
my $to = $mail->to;
my $cc = $mail->cc;
my $subject = $mail->subject;
my $_body = $mail->body;
my $body = join(“\n”, @$body);
my $xloop = $mail->get('X-Loop');
![Page 86: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/86.jpg)
Installation
#!/usr/bin/perl
use Mail::Audit;
my $mail = new Mail::Audit;
my $from = $mail->from;
my $to = $mail->to;
my $cc = $mail->cc;
my $subject = $mail->subject;
my $_body = $mail->body;
my $body = join(“\n”, @$body);
my $xloop = $mail->get('X-Loop');
my $message = $mail->{obj}->as_string;
![Page 87: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/87.jpg)
Installation
● Download and install Mail::Audit from CPAN● Create .forward file● Create filter file● Remember to chmod 0755!
![Page 88: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/88.jpg)
Mail disposition
● $mail->accept– Accepts mail into default inbox
![Page 90: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/90.jpg)
Mail disposition (continued)
● $mail->accept(“/path/to/alternate/mailbox”)– Accepts mail into a non-default mailbox
![Page 91: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/91.jpg)
Mail disposition (continued)
my $maildir = “/home/me/mail”;
if ($mail->subject =~ /spug/i) {
$mail->accept(“$maildir/spug-list”);
}
![Page 92: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/92.jpg)
Mail disposition (continued)
● $mail->pipe(“/path/to/external/program”)– Pipes mail through the specified program
![Page 93: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/93.jpg)
Mail disposition (continued)
if ($mail->subject =~ /keplerian/i) {
$mail->pipe(“/home/creede/parse_kepler”);
}
![Page 94: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/94.jpg)
Mail disposition (continued)
● $mail->resend(“someguy\@otherisp.com”)– Sends the mail in its entirety to another address
![Page 95: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/95.jpg)
Mail disposition (continued)
if (is_419($message)) {
$mail->{noexit} = 1;
$mail->put_header('X-Loop',
$mail->put_header('To', "$to (forwarded --
no monetary loss -- for your files)");
$mail->resend("uce\@ftc.gov");
$mail->resend("419.fcd\@usss.treas.gov");
$mail->{noexit} = 0;
$mail->ignore;
}
![Page 96: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/96.jpg)
Mail disposition (continued)
● $mail->reject($reason)– Rejects the mail, returning it to the sender with the
(optional) reason specified
![Page 97: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/97.jpg)
Mail disposition (continued)
if (is_murky($mail)) {
$mail->put_header('X-Loop',
$mail->reject("I don't like spam.");
}
![Page 98: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/98.jpg)
Mail disposition (continued)
● $mail->ignore– Consigns the mail to the bit bucket
![Page 99: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/99.jpg)
Mail disposition (continued)
# kill off Korean spam
if ($body =~ /ks.c/i) {
$mail->ignore;
}
![Page 100: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/100.jpg)
Mail::SpamAssassin
![Page 101: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/101.jpg)
Mail::SpamAssassin
● Header analysis
![Page 102: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/102.jpg)
Mail::SpamAssassin
● Header analysis● Text analysis
![Page 103: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/103.jpg)
Mail::SpamAssassin
● Header analysis● Text analysis● Blacklists
![Page 104: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/104.jpg)
Mail::SpamAssassin
● Header analysis● Text analysis● Blacklists● Vipul's Razor
![Page 105: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/105.jpg)
Mail::SpamAssassin – Installation
● Download and install Mail::SpamAssassin from CPAN
![Page 106: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/106.jpg)
Mail::SpamAssassin – Installation
# perl -MCPAN -e shell
cpan> install Mail::SpamAssassin
![Page 107: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/107.jpg)
Mail::SpamAssassin – Installation
#!/usr/bin/perl
use Mail::Audit;
use Mail::SpamAssassin;
my $mail = new Mail::Audit;
my $spamtest = new Mail::SpamAssassin;
my $status = $spamtest->check($mail);
if ($status->is_spam()) {
$mail>accept(“/home/you/spamtrap”);
}
![Page 108: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/108.jpg)
Mail::SpamAssassin – Configuration
● Load configuration from /etc/mail/spamassasin.conf or /home/you/.spamassassin/user_prefs
![Page 109: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/109.jpg)
Mail::SpamAssassin – Configuration
# SpamAssassin user preference file
#
required_hits 4
#
# default is 5
#
whitelist_from [email protected]
blacklist_from [email protected]
score USER_AGENT_AOL 1.00
![Page 110: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/110.jpg)
Paul Graham's Plan for Spam
![Page 111: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/111.jpg)
Paul Graham's Plan for Spam
madam 0.99
promotion 0.99
republic 0.99
republic 0.99
shortest 0.047225013
mandatory 0.047225013
standardization 0.07347802
2600 0.0813768
sorry 0.08221981
supported 0.09019077
![Page 112: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/112.jpg)
URLs for more information
![Page 113: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/113.jpg)
URLs for more information
● Internet Mail
http://www.imc.org/rfcs.html
![Page 114: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/114.jpg)
URLs for more information
● Internet Mail
http://www.imc.org/rfcs.html● Mail::Audit
http://simon-cozens.org/writings/mail-audit.html
![Page 115: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/115.jpg)
URLs for more information
● Internet Mail
http://www.imc.org/rfcs.html● Mail::Audit
http://simon-cozens.org/writings/mail-audit.html● Mail::SpamAssassin
http://www.spamassassin.org/
http://www.deersoft.com (Outlook)
![Page 116: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/116.jpg)
URLs for more information
● Internet Mail
http://www.imc.org/rfcs.html● Mail::Audit
http://simon-cozens.org/writings/mail-audit.html● Mail::SpamAssassin
http://www.spamassassin.org/
http://www.deersoft.com (Outlook)● Paul Graham's Plan for Spam
http://www.paulgraham.com/spam.html
![Page 117: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/117.jpg)
URLs for more information● Internet Mail
http://www.imc.org/rfcs.html● Mail::Audit
http://simon-cozens.org/writings/mail-audit.html● Mail::SpamAssassin
http://www.spamassassin.org/
http://www.deersoft.com (Outlook)● Paul Graham's Plan for Spam
http://www.paulgraham.com/spam.html● And of course Google.com!
![Page 118: Filtering Mail with Mail::Audit and Mail::SpamAssassin Creede Lambard penguinsinthenight.com 20 August 2002.](https://reader030.fdocuments.in/reader030/viewer/2022032414/56649eec5503460f94bfd3ee/html5/thumbnails/118.jpg)
Questions?