Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Stellar rays prove fibbing never pays. Embezzlement is another matter.


computers / news.software.nntp / Re: Google Groups spam - INN/Cleanfeed/etc solutions?

SubjectAuthor
* Google Groups spam - INN/Cleanfeed/etc solutions?John Goerzen
+* Re: Google Groups spam - INN/Cleanfeed/etc solutions?Russ Allbery
|+- Re: Google Groups spam - INN/Cleanfeed/etc solutions?Adam H. Kerman
|+- Re: Google Groups spam - INN/Cleanfeed/etc solutions?John Goerzen
|`* Re: Google Groups spam - INN/Cleanfeed/etc solutions?Thomas Hochstein
| `* Re: Google Groups spam - INN/Cleanfeed/etc solutions?Frank Slootweg
|  +- Re: Google Groups spam - INN/Cleanfeed/etc solutions?Adam H. Kerman
|  `- Re: Google Groups spam - INN/Cleanfeed/etc solutions?Julien ÉLIE
+- Re: Google Groups spam - INN/Cleanfeed/etc solutions?The Doctor
+* Re: Google Groups spam - INN/Cleanfeed/etc solutions?yamo'
|`* Re: Google Groups spam - INN/Cleanfeed/etc solutions?Grant Taylor
| +- Re: Google Groups spam - INN/Cleanfeed/etc solutions?Retro Guy
| `* Re: Google Groups spam - INN/Cleanfeed/etc solutions?yamo'
|  `* Re: Google Groups spam - INN/Cleanfeed/etc solutions?Grant Taylor
|   `- Re: Google Groups spam - INN/Cleanfeed/etc solutions?Kevin Bowling
+- Re: Google Groups spam - INN/Cleanfeed/etc solutions?Doc O'Leary
`- Re: Google Groups spam - INN/Cleanfeed/etc solutions?news

1
Google Groups spam - INN/Cleanfeed/etc solutions?

<slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=209&group=news.software.nntp#209

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.quux.org!alexnews.alexandria.complete.org!.POSTED!not-for-mail
From: jgoer...@complete.org (John Goerzen)
Newsgroups: news.software.nntp
Subject: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Mon, 6 Sep 2021 20:09:26 -0000 (UTC)
Organization: Alexandria NNCP news system
Message-ID: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
Injection-Date: Mon, 6 Sep 2021 20:09:26 -0000 (UTC)
Injection-Info: alexnews.alexandria.complete.org;
logging-data="147135"; mail-complaints-to="jgoerzen@complete.org"
User-Agent: slrn/1.0.3 (Linux)
 by: John Goerzen - Mon, 6 Sep 2021 20:09 UTC

Hi folks,

On my INN system running Cleanfeed, still a ton of spam breaks through. Looking
at it, it seems a large portion originates at Google Groups.

Of course, one could easily enough just block out Google Groups entirely. I'm
tempted... though I am aware that I myself occasionally posted (non-spam!) from
there during times when I didn't have established Usenet accounts, and there is
probably legit and desirable content from there too (though I don't really know
how much, or if it's worth keeping).

Does anybody have a Google Groups spam solution that's working for them that
they could share?

Thanks,

John

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<87o895krxf.fsf@hope.eyrie.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=210&group=news.software.nntp#210

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!paganini.bofh.team!news.killfile.org!news.eyrie.org!.POSTED!not-for-mail
From: eag...@eyrie.org (Russ Allbery)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Mon, 06 Sep 2021 20:03:56 -0700
Organization: The Eyrie
Message-ID: <87o895krxf.fsf@hope.eyrie.org>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: hope.eyrie.org;
logging-data="9834"; mail-complaints-to="news@eyrie.org"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Cancel-Lock: sha1:QuFwI60NlE+oNLkQgMEFeSuF06I=
 by: Russ Allbery - Tue, 7 Sep 2021 03:03 UTC

John Goerzen <jgoerzen@complete.org> writes:

> Of course, one could easily enough just block out Google Groups
> entirely. I'm tempted... though I am aware that I myself occasionally
> posted (non-spam!) from there during times when I didn't have
> established Usenet accounts, and there is probably legit and desirable
> content from there too (though I don't really know how much, or if it's
> worth keeping).

I don't have a spam solution to offer, but just as a data point a pretty
substantial amount of the legitimate content in newsgroups I moderate is
originally posted via Google Groups.

That probably wouldn't be picked up by a block rule due to its detour
through moderation, but that implies to me this is likely also true of
unmoderated groups.

--
Russ Allbery (eagle@eyrie.org) <https://www.eyrie.org/~eagle/>

Please post questions rather than mailing me directly.
<https://www.eyrie.org/~eagle/faqs/questions.html> explains why.

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<sh6mnr$of3$33@gallifrey.nk.ca>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=211&group=news.software.nntp#211

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.nk.ca!.POSTED.doctor.nl2k.ab.ca!not-for-mail
From: doc...@doctor.nl2k.ab.ca (The Doctor)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Tue, 7 Sep 2021 03:36:27 -0000 (UTC)
Organization: NetKnow News
Message-ID: <sh6mnr$of3$33@gallifrey.nk.ca>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
Injection-Date: Tue, 7 Sep 2021 03:36:27 -0000 (UTC)
Injection-Info: gallifrey.nk.ca; posting-host="doctor.nl2k.ab.ca:204.209.81.1";
logging-data="25059"; mail-complaints-to="usenet@gallifrey.nk.ca"
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: doctor@doctor.nl2k.ab.ca (The Doctor)
 by: The Doctor - Tue, 7 Sep 2021 03:36 UTC

In article <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>,
John Goerzen <jgoerzen@complete.org> wrote:
>Hi folks,
>
>On my INN system running Cleanfeed, still a ton of spam breaks through. Looking
>at it, it seems a large portion originates at Google Groups.
>
>Of course, one could easily enough just block out Google Groups entirely. I'm
>tempted... though I am aware that I myself occasionally posted (non-spam!) from
>there during times when I didn't have established Usenet accounts, and there is
>probably legit and desirable content from there too (though I don't really know
>how much, or if it's worth keeping).
>
>Does anybody have a Google Groups spam solution that's working for them that
>they could share?
>
>Thanks,
>
>John

In the Me entry use

Me/groups.google.ca:
--
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b
Canada on 20 Sept 2021 vote ! Beware https://mindspring.com

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<sh93dl$q2l$2@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=213&group=news.software.nntp#213

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ahk...@chinet.com (Adam H. Kerman)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Wed, 8 Sep 2021 01:25:09 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 26
Message-ID: <sh93dl$q2l$2@dont-email.me>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org> <87o895krxf.fsf@hope.eyrie.org>
Injection-Date: Wed, 8 Sep 2021 01:25:09 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="64872d5e916c16232370ab4edfe859d8";
logging-data="26709"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19PfWNWr18UyuidBAyaKIH/ZtMmZX0d4h4="
Cancel-Lock: sha1:SPcWClwcIrq06iwuhQycPCdtRnE=
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
 by: Adam H. Kerman - Wed, 8 Sep 2021 01:25 UTC

Russ Allbery <eagle@eyrie.org> wrote:
>John Goerzen <jgoerzen@complete.org> writes:

>>Of course, one could easily enough just block out Google Groups
>>entirely. I'm tempted... though I am aware that I myself occasionally
>>posted (non-spam!) from there during times when I didn't have
>>established Usenet accounts, and there is probably legit and desirable
>>content from there too (though I don't really know how much, or if it's
>>worth keeping).

>I don't have a spam solution to offer, but just as a data point a pretty
>substantial amount of the legitimate content in newsgroups I moderate is
>originally posted via Google Groups.

There are people who have posted to Usenet for years via Google Groups
who simply will not become subscribers on News servers for whatever
reason. Then there are people who post through Google Groups and complain
repeatedly about all the off-topic articles that I just never see. They
just don't see any benefit to kill filing and scoring techniques that
decent newsreaders offer.

There is no good explanation.

>That probably wouldn't be picked up by a block rule due to its detour
>through moderation, but that implies to me this is likely also true of
>unmoderated groups.

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<slrnsjf6rf.a5oh.jgoerzen@slrnh.complete.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=214&group=news.software.nntp#214

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.quux.org!alexnews.alexandria.complete.org!.POSTED!not-for-mail
From: jgoer...@complete.org (John Goerzen)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Tue, 7 Sep 2021 17:03:43 -0000 (UTC)
Organization: Alexandria NNCP news system
Message-ID: <slrnsjf6rf.a5oh.jgoerzen@slrnh.complete.org>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<87o895krxf.fsf@hope.eyrie.org>
Injection-Date: Tue, 7 Sep 2021 17:03:43 -0000 (UTC)
Injection-Info: alexnews.alexandria.complete.org;
logging-data="167137"; mail-complaints-to="jgoerzen@complete.org"
User-Agent: slrn/1.0.3 (Linux)
 by: John Goerzen - Tue, 7 Sep 2021 17:03 UTC

On 2021-09-07, Russ Allbery <eagle@eyrie.org> wrote:
> I don't have a spam solution to offer, but just as a data point a pretty
> substantial amount of the legitimate content in newsgroups I moderate is
> originally posted via Google Groups.
>
> That probably wouldn't be picked up by a block rule due to its detour
> through moderation, but that implies to me this is likely also true of
> unmoderated groups.

Thanks. I wondered if this might be the case, so probably (for me, at least)
just blackholing Google Groups in newsfeeds isn't the answer.

John

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<sh9qf9$9ba$1@pi2.pasdenom.info>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=215&group=news.software.nntp#215

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!news.niel.me!pi2.pasdenom.info!.POSTED.192.168.0.254!not-for-mail
From: yam...@beurdin.invalid (yamo')
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Wed, 8 Sep 2021 09:58:32 +0200
Organization: Serveur de salon
Message-ID: <sh9qf9$9ba$1@pi2.pasdenom.info>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
Reply-To: yamo@groumpf.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 8 Sep 2021 07:58:33 -0000 (UTC)
Injection-Info: pi2.pasdenom.info; posting-account="stephane"; posting-host="192.168.0.254";
logging-data="9578"; mail-complaints-to="abuse@pasdenom.info"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101
Firefox/60.0 SeaMonkey/2.53.9
Cancel-Lock: sha1:3WG6HvTAZOMrNwzhrPygdH798is=
In-Reply-To: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
X-Face: 3KI0f?#fLTG@kKi{}=#:0_|0/Yj`]d3fD_\O0w{?AFf"Cw9|V~#Nd.Wks
 by: yamo' - Wed, 8 Sep 2021 07:58 UTC

Hi,

John Goerzen a tapoté le 06/09/2021 22:09:

> Does anybody have a Google Groups spam solution that's working for them that
> they could share?

SpamAssassin works very good for that but it is slower than cleanfeed...

When I'll have time I will share the script gaved to me by another
newsmaster and some tricks of my conf.

--
Stéphane

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<shape2$h93$1@tncsrv09.home.tnetconsulting.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=216&group=news.software.nntp#216

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED.alpha.home.tnetconsulting.net!not-for-mail
From: gtay...@tnetconsulting.net (Grant Taylor)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Wed, 8 Sep 2021 10:43:29 -0600
Organization: TNet Consulting
Message-ID: <shape2$h93$1@tncsrv09.home.tnetconsulting.net>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<sh9qf9$9ba$1@pi2.pasdenom.info>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 8 Sep 2021 16:46:58 -0000 (UTC)
Injection-Info: tncsrv09.home.tnetconsulting.net; posting-host="alpha.home.tnetconsulting.net:198.18.18.251";
logging-data="17699"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.9.0
In-Reply-To: <sh9qf9$9ba$1@pi2.pasdenom.info>
Content-Language: en-US
 by: Grant Taylor - Wed, 8 Sep 2021 16:43 UTC

On 9/8/21 1:58 AM, yamo' wrote:
> When I'll have time I will share the script gaved to me by another
> newsmaster and some tricks of my conf.

I'd be interested in seeing said script / tricks.

--
Grant. . . .
unix || die

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<20210909020647.4f2f445c753a0f4857d79173@novabbs.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=218&group=news.software.nntp#218

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!.POSTED.10.136.143.187!not-for-mail
From: retro...@novabbs.com (Retro Guy)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Thu, 9 Sep 2021 02:06:47 -0700
Organization: Rocksolid Light
Message-ID: <20210909020647.4f2f445c753a0f4857d79173@novabbs.com>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<sh9qf9$9ba$1@pi2.pasdenom.info>
<shape2$h93$1@tncsrv09.home.tnetconsulting.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Info: i2pn2.org; posting-account="retrobbs1"; posting-host="10.136.143.187";
logging-data="25440"; mail-complaints-to="usenet@i2pn2.org"
X-Newsreader: Sylpheed 3.5.0beta1 (GTK+ 2.24.25; x86_64-pc-linux-gnu)
 by: Retro Guy - Thu, 9 Sep 2021 09:06 UTC

On Wed, 8 Sep 2021 10:43:29 -0600
Grant Taylor <gtaylor@tnetconsulting.net> wrote:

> On 9/8/21 1:58 AM, yamo' wrote:
> > When I'll have time I will share the script gaved to me by another
> > newsmaster and some tricks of my conf.
>
> I'd be interested in seeing said script / tricks.

I'd like to see this also to see where I can improve/replace the way I do it.

For my servers, I check in cleanfeed.local by sending a copy of the message to a script:

$tempfile = rand(100);
$tempfileP = "check/".$tempfile;
saveart($tempfileP);
$spamvalue = `/usr/bin/php /news/spam/bin/spamassassin.php $tempfile`;
$isspam = "/news/spam/found/".$tempfile;
if (-e $isspam) {
return reject('Exceeds Spam Level');
}

So, if the file (copy of message) exists in /news/spam/found, it was identified as spam and is rejected.

The script I wrote in php as that's easy for me. It just accepts the file name as an argument and runs it through spamc:

$spamcommand = $spamc.' -E < '.$spamfile;
$spamresult = passthru($spamcommand, $res);

If it's identified as spam, it moves the file to /news/spam/found, where cleanfeed then sees it there.

Those steps were easy, the hardest part is your spamassassin 'local.cf' file, where you need to make quite a few adjustments for it to work well with a news article instead of an email.

Retro Guy

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<shftsd$c6n$1@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=219&group=news.software.nntp#219

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: drole...@2017usenet1.subsume.com (Doc O'Leary)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Fri, 10 Sep 2021 15:33:33 -0000 (UTC)
Organization: Subsume Technologies, Inc.
Lines: 26
Message-ID: <shftsd$c6n$1@dont-email.me>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 10 Sep 2021 15:33:33 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="590231040d6989b6faaaea29551aead2";
logging-data="12503"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+HxpCuN3RE6OgCxJM80NxNVvFevYnY964="
User-Agent: com.subsume.NNTP/1.0.0
Cancel-Lock: sha1:kcGBweDavlmqwN4se+4gyjQK1i0=
 by: Doc O'Leary - Fri, 10 Sep 2021 15:33 UTC

For your reference, records indicate that
John Goerzen <jgoerzen@complete.org> wrote:

> Of course, one could easily enough just block out Google Groups entirely.

This is the right solution.

> I myself occasionally posted (non-spam!) from
> there during times when I didn't have established Usenet accounts

Sunk cost fallacy.

> there is
> probably legit and desirable content from there too (though I don't really know
> how much, or if it's worth keeping).

The right question to ask is: What is *Google* doing to stop the abuse?
It’s fundamentally their responsibility. As with many of their other
services, they really don’t seem to care to clean up their own messes.
They certainly aren’t paying *me* to clean up their messes. UDP.

--
"Also . . . I can kill you with my brain."
River Tam, Trash, Firefly

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<nsn.20210910233603.2270@scatha.ancalagon.de>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=220&group=news.software.nntp#220

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!news.szaf.org!thangorodrim.ancalagon.de!.POSTED.scatha.ancalagon.de!not-for-mail
From: thh...@thh.name (Thomas Hochstein)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Fri, 10 Sep 2021 23:36:06 +0200
Message-ID: <nsn.20210910233603.2270@scatha.ancalagon.de>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org> <87o895krxf.fsf@hope.eyrie.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Injection-Info: thangorodrim.ancalagon.de; posting-host="scatha.ancalagon.de:10.0.1.1";
logging-data="30572"; mail-complaints-to="abuse@th-h.de"
User-Agent: ForteAgent/8.00.32.1272
X-NNTP-Posting-Date: Fri, 10 Sep 2021 23:36:03 +0200
X-Face: *OX>R5kq$7DjZ`^-[<HL?'n9%\ZDfCz/_FfV0_tpx7w{Vv1*byr`TC\[hV:!SJosK'1gA>1t8&@'PZ-tSFT*=<}JJ0nXs{WP<@(=U!'bOMMOH&Q0}/(W_d(FTA62<r"l)J\)9ERQ9?6|_7T~ZV2Op*UH"2+1f9[va
Cancel-Lock: sha1:pvRdLYAkhFTi8JecPzCW0Ir8h18=
X-Clacks-Overhead: GNU Terry Pratchett
 by: Thomas Hochstein - Fri, 10 Sep 2021 21:36 UTC

Russ Allbery schrieb:

> I don't have a spam solution to offer, but just as a data point a pretty
> substantial amount of the legitimate content in newsgroups I moderate is
> originally posted via Google Groups.

Another point of data:

These were the TOP 5 posting server for de.* in 2014:
| 32.29 17014 individual.net
| 13.37 7043 news.albasani.net
| 10.81 5694 news.eternal-september.org
| 7.80 4108 postnews.google.com
| 7.66 4036 news.arcor.de.POSTED

albasani.net is gone, news.arcor.de is long gone, and everything
(news, mail, chat) has shifted more and more to the web, so I'd think
Google Groups will have an even higher share now.

After a quick look: last month (2021-08), 14% of all posts in de.*
came from Google Groups. I don't think that will be much different for
English-speaking hierarchies. That would be a pretty big chunk to
block.

-thh

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<1631316159.bystand@zzo38computer.org>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=222&group=news.software.nntp#222

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!aioe.org!P703Hxu1m1uplaQVJzdzug.user.46.165.242.75.POSTED!not-for-mail
From: new...@zzo38computer.org.invalid
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Fri, 10 Sep 2021 16:46:15 -0700
Organization: Aioe.org NNTP Server
Message-ID: <1631316159.bystand@zzo38computer.org>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
Mime-Version: 1.0
Injection-Info: gioia.aioe.org; logging-data="56133"; posting-host="P703Hxu1m1uplaQVJzdzug.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: bystand/1.3.0pre
X-Notice: Filtered by postfilter v. 0.9.2
 by: new...@zzo38computer.org.invalid - Fri, 10 Sep 2021 23:46 UTC

John Goerzen <jgoerzen@complete.org> wrote:
> On my INN system running Cleanfeed, still a ton of spam breaks through. Looking
> at it, it seems a large portion originates at Google Groups.

In my experience, all of the spam I see on Usenet seems to come from Google.

> Of course, one could easily enough just block out Google Groups entirely. I'm
> tempted... though I am aware that I myself occasionally posted (non-spam!) from
> there during times when I didn't have established Usenet accounts, and there is
> probably legit and desirable content from there too (though I don't really know
> how much, or if it's worth keeping).

At least in some newsgroups, there are some good messages from Google Groups
too and not only bad ones.

--
Don't laugh at the moon when it is day time in France.

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<shi3dq.c44.1@ID-201911.user.individual.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=224&group=news.software.nntp#224

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: thi...@ddress.is.invalid (Frank Slootweg)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: 11 Sep 2021 09:20:50 GMT
Organization: NOYB
Lines: 41
Message-ID: <shi3dq.c44.1@ID-201911.user.individual.net>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org> <87o895krxf.fsf@hope.eyrie.org> <nsn.20210910233603.2270@scatha.ancalagon.de>
X-Trace: individual.net 2EKBoUPgZurlf5Vh8qCobwTVo3/7UIwDaUYIAQgDIkg5sqXLHQ
X-Orig-Path: not-for-mail
Cancel-Lock: sha1:eoQEuxK5hBqzqxCZnsjK+1x+gi0=
User-Agent: tin/1.6.2-20030910 ("Pabbay") (UNIX) (CYGWIN_NT-6.3-WOW/2.8.0(0.309/5/3) (i686)) Hamster/2.0.2.2
X-Antivirus: Avast (VPS 210911-0, 09/11/2021), Outbound message
X-Antivirus-Status: Clean
 by: Frank Slootweg - Sat, 11 Sep 2021 09:20 UTC

Thomas Hochstein <thh@thh.name> wrote:
> Russ Allbery schrieb:
>
> > I don't have a spam solution to offer, but just as a data point a pretty
> > substantial amount of the legitimate content in newsgroups I moderate is
> > originally posted via Google Groups.
>
> Another point of data:
>
> These were the TOP 5 posting server for de.* in 2014:
> | 32.29 17014 individual.net
> | 13.37 7043 news.albasani.net
> | 10.81 5694 news.eternal-september.org
> | 7.80 4108 postnews.google.com
> | 7.66 4036 news.arcor.de.POSTED
>
> albasani.net is gone, news.arcor.de is long gone, and everything
> (news, mail, chat) has shifted more and more to the web, so I'd think
> Google Groups will have an even higher share now.
>
> After a quick look: last month (2021-08), 14% of all posts in de.*
> came from Google Groups. I don't think that will be much different for
> English-speaking hierarchies. That would be a pretty big chunk to
> block.

Agreed. Unless it's actual spam - i.e. not just articles which some
people happen to dislike -, I think articles posted via Google Groups
should not be blocked.

FWIW, individual.net is my NSP and in the - mostly technical - groups
I am subscribed to, Google Groups postings are not really a problem.

Looking at in in another way: If people read with a real newsreader,
*they* can block Google Groups postings if they want to, i.e. their NSP
does have to do it for them.

So IMO, only if the volume of the alleged 'spam' is a - real - problem
for the NSPs/News-Admins *themselves*, should they (try to) block it.

--
Frank Slootweg, ex (part-time) News Admin in some tiny 150K employee company.

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<shirpa$9s9$2@dont-email.me>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=225&group=news.software.nntp#225

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail
From: ahk...@chinet.com (Adam H. Kerman)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Sat, 11 Sep 2021 18:16:10 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 56
Message-ID: <shirpa$9s9$2@dont-email.me>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org> <87o895krxf.fsf@hope.eyrie.org> <nsn.20210910233603.2270@scatha.ancalagon.de> <shi3dq.c44.1@ID-201911.user.individual.net>
Injection-Date: Sat, 11 Sep 2021 18:16:10 -0000 (UTC)
Injection-Info: reader02.eternal-september.org; posting-host="fb02f4d6bd9f5fe792d3b6542bfa19e8";
logging-data="10121"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18BfsN7k4l4wA55QZhovRSEjOV4msDdp0Q="
Cancel-Lock: sha1:5XskKRJQYyVUu93Ac8mZqXDdfCA=
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
 by: Adam H. Kerman - Sat, 11 Sep 2021 18:16 UTC

Frank Slootweg <this@ddress.is.invalid> wrote:
>Thomas Hochstein <thh@thh.name> wrote:
>>Russ Allbery schrieb:

>>>I don't have a spam solution to offer, but just as a data point a pretty
>>>substantial amount of the legitimate content in newsgroups I moderate is
>>>originally posted via Google Groups.

>>Another point of data:

>>These were the TOP 5 posting server for de.* in 2014:
>>| 32.29 17014 individual.net
>>| 13.37 7043 news.albasani.net
>>| 10.81 5694 news.eternal-september.org
>>| 7.80 4108 postnews.google.com
>>| 7.66 4036 news.arcor.de.POSTED

>>albasani.net is gone, news.arcor.de is long gone, and everything
>>(news, mail, chat) has shifted more and more to the web, so I'd think
>>Google Groups will have an even higher share now.

>>After a quick look: last month (2021-08), 14% of all posts in de.*
>>came from Google Groups. I don't think that will be much different for
>>English-speaking hierarchies. That would be a pretty big chunk to
>>block.

> Agreed. Unless it's actual spam - i.e. not just articles which some
>people happen to dislike -, I think articles posted via Google Groups
>should not be blocked.

> FWIW, individual.net is my NSP and in the - mostly technical - groups
>I am subscribed to, Google Groups postings are not really a problem.

> Looking at in in another way: If people read with a real newsreader,
>*they* can block Google Groups postings if they want to, i.e. their NSP
>does have to do it for them.

> So IMO, only if the volume of the alleged 'spam' is a - real - problem
>for the NSPs/News-Admins *themselves*, should they (try to) block it.

There are massive numbers of articles posted to Usenet via several
servers that Google Groups peer with that don't meet the cancellable
spam threshold but are always off topic advertising wherever posted.

Cross-posted political articles, often whole-text copyright violation of
articles found on the Web, aren't on topic, but they don't meet the
definition of cancellable spam.

We don't have to worry too much about cancellable spam and how it
appears to users as there are decent spam countermeasures. It's all the
other off-topic garbage.

The statistics Thomas provided don't tell us about on-topic posting via
Google Groups, and that's the only number that's important. Are there
enough on-topic versus non-spam off-topic articles being posted through
Google Groups to peer with them? That's the only true consideration.

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<si72cc$ko9$1@pi2.pasdenom.info>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=226&group=news.software.nntp#226

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!paganini.bofh.team!pi2.pasdenom.info!.POSTED.192.168.0.254!not-for-mail
From: yam...@beurdin.invalid (yamo')
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Sun, 19 Sep 2021 10:11:24 -0000 (UTC)
Organization: Serveur de salon
Message-ID: <si72cc$ko9$1@pi2.pasdenom.info>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<sh9qf9$9ba$1@pi2.pasdenom.info>
<shape2$h93$1@tncsrv09.home.tnetconsulting.net>
Reply-To: yamo@groumpf.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 19 Sep 2021 10:11:24 -0000 (UTC)
Injection-Info: pi2.pasdenom.info; posting-account="stephane"; posting-host="192.168.0.254";
logging-data="21257"; mail-complaints-to="abuse@pasdenom.info"
User-Agent: Pan/0.147 (Sweet Solitude; 3b35d8b
gitlab.gnome.org/dgraef/pan.git)
Cancel-Lock: sha1:ENajk5tzFtsb0zNpQQ915hp7TnQ=
X-Face: &PPWec9~_6Gu{@ZyviWe<$Xy%],zKQR^>j|l^F@A=yT!>\YUh`O/Fzg0=
 by: yamo' - Sun, 19 Sep 2021 10:11 UTC

Hi,

A little bit long post...

Le Wed, 8 Sep 2021 10:43:29 -0600, Grant Taylor a écrit :

> On 9/8/21 1:58 AM, yamo' wrote:
>> When I'll have time I will share the script gaved to me by another
>> newsmaster and some tricks of my conf.
>
> I'd be interested in seeing said script / tricks.

On a debian buster ( spamassassin 3.4.4 is a good choice)
Or bullseye (3.4.6 working fine but there is some tricks that I've lost in a SD card :< ) :

___________________

In /etc/news/newsfeeds :

spamchk!:local.test:Tp,Ac:spamchk %s#replace local.test by some usefull groups

___________________
In /usr/lib/news/bin/spamchk :
#!/bin/sh
# -----------------------------------------------------------------
# File: spamchk
# Purpose: SPAMASSASSIN shell-based filter used with INN
# Location: /usr/local/bin
# Author: Doug Le Tough
# -----------------------------------------------------------------

#set -x
# Variables
PATH=$PATH:/usr/lib/news/bin/
SM="/usr/lib/news/bin/sm"
BC="/usr/bin/bc -l"
AWK="/usr/bin/awk"
ICONV="/usr/bin/iconv"
SPAMC_USER="news"
#SPAMC AND LOCAL TUNNING...
#SPAMC="/usr/local/bin/spamc -t 55 -n 55 -c --max-size=64000 --retry-sleep=39 --filter-retries=2 --connect-retries=3"
#SPAMC="/usr/local/bin/spamc -t 55 -n 55 -c --retry-sleep=39 --filter-retries=2 --connect-retries=3"
# SLOW but usefull tunning :
#SPAMC="/usr/local/bin/spamc -t 25 -n 25 -c --retry-sleep=37 --filter-retries=7 --connect-retries=13"
# faster but skip a lot of spam
SPAMC="/usr/local/bin/spamc -t 5 -n 5 -c --filter-retry-sleep=99 --retry-sleep=99 --filter-retries=2 --connect-retries=2"
LOG="/var/log/news/news.spam"
LOGGER="logger -p news.notice"
# after mkdir /var/tmp/spamchk
SPAMLOG_PATH="/var/tmp/spamchk"
MESSAGE=""
NEWSGROUPS="erreur"
#CONVERTI="_converti"
# Spam max score
# LOCAL STUFF
SPAM_LIMIT=5
#SPAM_LIMIT=7.4
#erreur Spam spotted: [0/0] **
ERRORMID='0/0';
ERRORINIT='@000F00000000000000000000000000000000@';
#MESSAGESPAM = $1
# Pipe message to spamc
if [ "$ERRORINIT" != "$1" ] ; then
SPAM_VALUE1=$($SM -S $1 |$SPAMC | $AWK -F '/' '{print $1}' )
if [ "$MESSAGE" != "$SPAM_VALUE1" ] ; then
if [ "$ERRORMID" != "$SPAM_VALUE1" ] ; then
# echo "## $0 : $1 [$SPAM_VALUE1]" >> $LOG
# echo "## $1 [$SPAM_VALUE1]" >> $LOG
# SPAM_VALUE=$(echo "(5*$SPAM_VALUE)" | $BC)
if (( $(echo "$SPAM_VALUE1 $SPAM_LIMIT" | awk '{exit ( $1 < $2)}') )); then
#then
MID=$($SM -S $1 2>/dev/null | grep Message-ID)
CLEAN_MID=$(echo $MID | $AWK -F "<" '{print $2}' | $AWK -F ">" '{print $1}')
NEWSGROUPS=$($SM -S $1 | grep Newsgroups)
MESSAGE="$SPAM_VALUE1/$SPAM_LIMIT"
echo "Spam $MESSAGE $MID $NEWSGROUPS" >> $LOG
#echo "$0: Spam spotted: [$MESSAGE] ** $MID"
# Move spam article to SPAMLOG_PATH
# $SM -S $1 >> $SPAMLOG_PATH/$SPAM_VALUE1.$CLEAN_MID
# LOCAL STUFF : /usr/lib/news/bin/ctlinnd
/usr/lib/news/bin/ctlinnd cancel $CLEAN_MID 2>/dev/null 1>/dev/null
# rapport un peu bavard ...
#head -100 "$SPAMLOG_PATH/$SPAM_VALUE1.$CLEAN_MID" > "$SPAMLOG_PATH/$SPAM_VALUE1.$CLEAN_MID_cut"
# LOCAL STUFF : /usr/lib/news/bin/rapportspam for debugging in some local.spam group
#/usr/lib/news/bin/rapportspam.misc.test.pl $CLEAN_MID "$MESSAGE" "$SPAMLOG_PATH/$SPAM_VALUE1.$CLEAN_MID_cut"
else
# seulement log
echo "## $1 [$SPAM_VALUE1]" >> $LOG
# echo "## $0 : $1 [$SPAM_VALUE1]" >> $LOG
# pour tests
#echo "$DATE $HOST $0: $1 PAS DE Spam : [ $SPAM_VALUE1 < $SPAM_LIMIT ] ** $MID"
fi
else
#errlog
echo "$0 $1 erreur [$SPAM_VALUE1] $MID" >>$LOG
fi
else
echo "erreur $0 : $1 [$SPAM_VALUE1] vide [$MESSAGE]" >>$LOG
exit 1
fi

fi
exit 0

In debian tunning spamassassin for NNTP :

___________________
/etc/spamassassin/drugs.cf
# local filter that I could send by mail to not inform spammers...

___________________
/etc/spamassassin/headers.cf
# local filter ...

___________________
/etc/spamassassin/init.pre
# disabling standard filters :
# loadplugin Mail::SpamAssassin::Plugin::RelayCountry
#loadplugin Mail::SpamAssassin::Plugin::Hashcash
#loadplugin Mail::SpamAssassin::Plugin::SPF

___________________
/etc/spamassassin/karma.cf
#loadplugin Mail::SpamAssassin::Plugin::Karmasphere

___________________
/etc/spamassassin/local.cf
lock_method flock
## par défaut 0600
# maybe to be updated...
#bayes_file_mode=0666
time_limit 200
ignore_always_matching_regexps 1
required_score 5.0
#required_score 7.4
use_bayes 1
bayes_auto_learn 1
bayes_auto_learn_threshold_spam 5.9
bayes_auto_learn_threshold_nonspam -5
bayes_expiry_max_db_size 500000
#bayes_auto_expire 1
bayes_auto_expire 0
# bayes_ignore_header X-Bogosity
# bayes_ignore_header X-Spam-Flag
# bayes_ignore_header X-Spam-Status
loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
#loadplugin Mail::SpamAssassin::Plugin::WLBLEval
# Some shortcircuiting, if the plugin is enabled
#
ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
shortcircuit USER_IN_WHITELIST on
shortcircuit USER_IN_DEF_WHITELIST on
shortcircuit USER_IN_ALL_SPAM_TO on
shortcircuit SUBJECT_IN_WHITELIST on

# the opposite; blacklisted mails can also save CPU
# shortcircuit USER_IN_BLACKLIST on
shortcircuit USER_IN_BLACKLIST_TO on
shortcircuit SUBJECT_IN_BLACKLIST on
# if you have taken the time to correctly specify your "trusted_networks",
# this is another good way to save CPU
# # shortcircuit ALL_TRUSTED on

# and a well-trained bayes DB can save running rules, too
#

shortcircuit BAYES_99 spam

# shortcircuit BAYES_00 ham

endif # Mail::SpamAssassin::Plugin::Shortcircuit

allow_user_rules 1
loadplugin Mail::SpamAssassin::Plugin::TextCat
#loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
#loadplugin Mail::SpamAssassin::Plugin::DNSEval
#use_pyzor 0
#use_dcc 0
#use_dcc 0
#use_razor 0
ok_languages fr
use_txrep 1
txrep_dilution_factor 0.86
txrep_factor 0.47
#default txrep_learn_penalty 20
txrep_learn_penalty 30
#default txrep_learn_bonus 20
txrep_learn_bonus 30
#whitelist_from someadresses
#blacklist_from someadresses

___________________
/etc/spamassassin/meta.cf
#local STUFF for all meta rules ...

___________________
/etc/spamassassin/news.cf
#very long local stuff...

___________________
/etc/spamassassin/nospam.cf
# local stuff...

___________________
/etc/spamassassin/prets.cf
# local stuff

___________________
/etc/spamassassin/sa-compile.pre
# Rule2XSBody - speedup by compilation of ruleset to native code
# loadplugin Mail::SpamAssassin::Plugin::Rule2XSBody

___________________
/etc/spamassassin/sexe.cf
#local stuff on boring sex spam

___________________
/etc/spamassassin/spamassassin_fr.cf
# stuff found on the web

___________________
/etc/spamassassin/v310.pre
#loadplugin Mail::SpamAssassin::Plugin::DCC
#loadplugin Mail::SpamAssassin::Plugin::Pyzor
#loadplugin Mail::SpamAssassin::Plugin::Razor2
#loadplugin Mail::SpamAssassin::Plugin::SpamCop
#loadplugin Mail::SpamAssassin::Plugin::AntiVirus
#may working...
#loadplugin Mail::SpamAssassin::Plugin::AWL
# AutoLearnThreshold - threshold-based discriminator for Bayes auto-learning
# loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
# TextCat - language guesser
# loadplugin Mail::SpamAssassin::Plugin::TextCat
# AccessDB - lookup from-addresses in access database
# #loadplugin Mail::SpamAssassin::Plugin::AccessDB

# WhitelistSubject - Whitelist/Blacklist certain subject regular expressions
# loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject
loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
#may not be usefull (?)
loadplugin Mail::SpamAssassin::Plugin::ReplaceTags

___________________
/etc/spamassassin/v312.pre
#loadplugin Mail::SpamAssassin::Plugin::DKIM

___________________
/etc/spamassassin/v320.pre
loadplugin Mail::SpamAssassin::Plugin::Check
#loadplugin Mail::SpamAssassin::Plugin::HTTPSMismatch
#loadplugin Mail::SpamAssassin::Plugin::URIDetail
#very usefull
loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
# Plugins which used to be EvalTests.pm
# broken out into separate plugins
loadplugin Mail::SpamAssassin::Plugin::Bayes
loadplugin Mail::SpamAssassin::Plugin::BodyEval
#loadplugin Mail::SpamAssassin::Plugin::DNSEval
loadplugin Mail::SpamAssassin::Plugin::HTMLEval
loadplugin Mail::SpamAssassin::Plugin::HeaderEval
loadplugin Mail::SpamAssassin::Plugin::MIMEEval
#loadplugin Mail::SpamAssassin::Plugin::RelayEval
#loadplugin Mail::SpamAssassin::Plugin::URIEval
#loadplugin Mail::SpamAssassin::Plugin::WLBLEval


Click here to read the complete article
Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<si7rhm$17e$1@tncsrv09.home.tnetconsulting.net>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=227&group=news.software.nntp#227

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED.alpha.home.tnetconsulting.net!not-for-mail
From: gtay...@tnetconsulting.net (Grant Taylor)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Sun, 19 Sep 2021 11:16:58 -0600
Organization: TNet Consulting
Message-ID: <si7rhm$17e$1@tncsrv09.home.tnetconsulting.net>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<sh9qf9$9ba$1@pi2.pasdenom.info>
<shape2$h93$1@tncsrv09.home.tnetconsulting.net>
<si72cc$ko9$1@pi2.pasdenom.info>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 19 Sep 2021 17:20:54 -0000 (UTC)
Injection-Info: tncsrv09.home.tnetconsulting.net; posting-host="alpha.home.tnetconsulting.net:198.18.18.251";
logging-data="1262"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.13.0
In-Reply-To: <si72cc$ko9$1@pi2.pasdenom.info>
Content-Language: en-US
 by: Grant Taylor - Sun, 19 Sep 2021 17:16 UTC

On 9/19/21 4:11 AM, yamo' wrote:
> Hi,
>
> A little bit long post...

Thank you for sharing.

I'll read ~> study this as time permits in the coming days.

--
Grant. . . .
unix || die

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<si86od$ju2$1@news.trigofacile.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=228&group=news.software.nntp#228

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!aioe.org!news.gegeweb.eu!gegeweb.org!news.trigofacile.com!.POSTED.176-143-2-105.abo.bbox.fr!not-for-mail
From: iul...@nom-de-mon-site.com.invalid (Julien ÉLIE)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Sun, 19 Sep 2021 22:32:07 +0200
Organization: Groupes francophones par TrigoFACILE
Message-ID: <si86od$ju2$1@news.trigofacile.com>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<87o895krxf.fsf@hope.eyrie.org> <nsn.20210910233603.2270@scatha.ancalagon.de>
<shi3dq.c44.1@ID-201911.user.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 19 Sep 2021 20:32:13 -0000 (UTC)
Injection-Info: news.trigofacile.com; posting-account="julien"; posting-host="176-143-2-105.abo.bbox.fr:176.143.2.105";
logging-data="20418"; mail-complaints-to="abuse@trigofacile.com"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0)
Gecko/20100101 Thunderbird/78.14.0
In-Reply-To: <shi3dq.c44.1@ID-201911.user.individual.net>
Content-Language: fr
 by: Julien ÉLIE - Sun, 19 Sep 2021 20:32 UTC

Hi Frank,

>> After a quick look: last month (2021-08), 14% of all posts in de.*
>> came from Google Groups. I don't think that will be much different for
>> English-speaking hierarchies. That would be a pretty big chunk to
>> block.

According to Richard's spool stats
https://www.greenend.org.uk/rjk/spoolstats/
https://www.greenend.org.uk/rjk/spoolstats/agents-summary.html
in the last 7 days, about 9000 articles out of 27000 in the Big-8 and
uk.* came from Google Groups. A third!

--
Julien ÉLIE

« Cela n'a rien de remarquable. Il suffit d'appuyer sur la bonne touche
au bon moment et l'instrument joue tout seul. » (J.-S. Bach)

Re: Google Groups spam - INN/Cleanfeed/etc solutions?

<sid8fl$107l$1@842ffb22-07e1-11e5-a459-00266cf00584.csiph.com>

 copy mid

https://www.novabbs.com/computers/article-flat.php?id=230&group=news.software.nntp#230

 copy link   Newsgroups: news.software.nntp
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!csiph.com!.POSTED.208.72.53.132!not-for-mail
From: kevin.bo...@kev009.com (Kevin Bowling)
Newsgroups: news.software.nntp
Subject: Re: Google Groups spam - INN/Cleanfeed/etc solutions?
Date: Tue, 21 Sep 2021 11:32:21 -0700
Organization: csiph.com Internet News Service
Message-ID: <sid8fl$107l$1@842ffb22-07e1-11e5-a459-00266cf00584.csiph.com>
References: <slrnsjctbm.3ik08.jgoerzen@slrnh.complete.org>
<sh9qf9$9ba$1@pi2.pasdenom.info>
<shape2$h93$1@tncsrv09.home.tnetconsulting.net>
<si72cc$ko9$1@pi2.pasdenom.info>
<si7rhm$17e$1@tncsrv09.home.tnetconsulting.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 21 Sep 2021 18:32:21 -0000 (UTC)
Injection-Info: 842ffb22-07e1-11e5-a459-00266cf00584.csiph.com; posting-host="208.72.53.132";
logging-data="33013"; mail-complaints-to="admin@kev009.com"
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:78.0) Gecko/20100101
Thunderbird/78.14.0
In-Reply-To: <si7rhm$17e$1@tncsrv09.home.tnetconsulting.net>
Content-Language: en-US
 by: Kevin Bowling - Tue, 21 Sep 2021 18:32 UTC

On 9/19/21 10:16 AM, Grant Taylor wrote:
> On 9/19/21 4:11 AM, yamo' wrote:
>> Hi,
>>
>> A little bit long post...
>
> Thank you for sharing.
>
> I'll read ~> study this as time permits in the coming days.
>
>
>

I am not sure if anyone has used it with an NNTP server yet but rspamd
is generally superior to SpamAssassin in every way https://www.rspamd.com/

1
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor