Rocksolid Light

OCTADE

mail  files  register  groups  login

Message-ID:  

rocksolid / Rocksolid Nodes Help / Re: spam


1
Re: spam

<uoua2r$gjfp$1@i2pn2.org>

  copy mid

https://news.octade.net/rocksolid/article-flat.php?id=272&group=rocksolid.nodes.help#272

  copy link   Newsgroups: rocksolid.nodes.help
Path: i2pn2.org!.POSTED!not-for-mail
From: richard.harnden@gmail.invalid (Richard Harnden)
Newsgroups: rocksolid.nodes.help
Subject: Re: spam
Date: Thu, 25 Jan 2024 18:42:34 +0000
Organization: i2pn2 (i2pn.org)
Message-ID: <uoua2r$gjfp$1@i2pn2.org>
References: <AABlshyrwA4AAGkm.A3.flnews@yamo.pasdenom.info>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Thu, 25 Jan 2024 18:42:35 -0000 (UTC)
Injection-Info: i2pn2.org;
logging-data="544249"; mail-complaints-to="usenet@i2pn2.org";
posting-account="syXS973RizGaPH3w4jDf63KX4ZKNZ3c/SwuisBM93fs";
User-Agent: Mozilla Thunderbird
In-Reply-To: <AABlshyrwA4AAGkm.A3.flnews@yamo.pasdenom.info>
X-Spam-Checker-Version: SpamAssassin 4.0.0
Content-Language: en-GB
 by: Richard Harnden - Thu, 25 Jan 2024 18:42 UTC

On 25/01/2024 08:32, yamo' wrote:
> Hi,
>
> I've seen a spam which was posted with rocksolid on www.novabbs.com :
>
> Newsgroups: sci.crypt,alt.bbs
> Organization: novaBBS
> Message-ID: <92c9f6ba97ab8e709375e93e73adbe5d@www.novabbs.com>
>

I think that has already been nocem'd

>
> Is-it the right place to discuss on spam subjects? >
>

Re: spam

<2dc8d6d77da2d09ad326592d4649ec63$1@www.novabbs.org>

  copy mid

https://news.octade.net/rocksolid/article-flat.php?id=273&group=rocksolid.nodes.help#273

  copy link   Newsgroups: rocksolid.nodes.help
Path: i2pn2.org!.POSTED!not-for-mail
From: retroguy@novabbs.org (Retro Guy)
Newsgroups: rocksolid.nodes.help
Subject: Re: spam
Date: Thu, 25 Jan 2024 13:15:40 -0700
Organization: Rocksolid Light
Message-ID: <2dc8d6d77da2d09ad326592d4649ec63$1@www.novabbs.org>
References: <AABlshyrwA4AAGkm.A3.flnews@yamo.pasdenom.info> <uoua2r$gjfp$1@i2pn2.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Injection-Info: i2pn2.org;
logging-data="554056"; mail-complaints-to="usenet@i2pn2.org";
posting-account="PGd4t4cXnWwgUWG9VtTiCsm47oOWbHLcTr4rYoM0Edo";
User-Agent: 40tude_Dialog/2.0.15.41
X-Spam-Checker-Version: SpamAssassin 4.0.0
 by: Retro Guy - Thu, 25 Jan 2024 20:15 UTC

On Thu, 25 Jan 2024 18:42:34 +0000, Richard Harnden wrote:

> On 25/01/2024 08:32, yamo' wrote:
>> Hi,
>>
>> I've seen a spam which was posted with rocksolid on www.novabbs.com :
>>
>> Newsgroups: sci.crypt,alt.bbs
>> Organization: novaBBS
>> Message-ID: <92c9f6ba97ab8e709375e93e73adbe5d@www.novabbs.com>

Thanks for the report yamo'!

> I think that has already been nocem'd
>
>>
>> Is-it the right place to discuss on spam subjects? >
>>
Yes, it looks like it's already been caught by NoCeM.
https://www.novabbs.com/SEARCH/search_nocem.php?msgid=%3C92c9f6ba97ab8e709375e93e73adbe5d%40www.novabbs.com%3E

Re: spam

<AABls7ETF2IAAGkm.A3.flnews@yamo.pasdenom.info>

  copy mid

https://news.octade.net/rocksolid/article-flat.php?id=277&group=rocksolid.nodes.help#277

  copy link   Newsgroups: rocksolid.nodes.help
Path: i2pn2.org!i2pn.org!nntp.comgw.net!paganini.bofh.team!pasdenom.info!.POSTED.2a01:e0a:21:ea80:9218:23da:bb21:7203!not-for-mail
From: yamo@beurdin.invalid (yamo')
Newsgroups: rocksolid.nodes.help
Subject: Re: spam
Date: Fri, 26 Jan 2024 14:18:11 +0100
Organization: <http://pasdenom.info/news.html>
Message-ID: <AABls7ETF2IAAGkm.A3.flnews@yamo.pasdenom.info>
References: <AABlshyrwA4AAGkm.A3.flnews@yamo.pasdenom.info> <uoua2r$gjfp$1@i2pn2.org> <2dc8d6d77da2d09ad326592d4649ec63$1@www.novabbs.org>
Reply-To: yamo' <yamo@groumpf.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=fixed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 26 Jan 2024 13:18:11 -0000
Injection-Info: rasp.pasdenom.info; posting-account="stephane@usenet"; posting-host="2a01:e0a:21:ea80:9218:23da:bb21:7203";
logging-data="22175"; mail-complaints-to="abuse@pasdenom.info"
User-Agent: flnews/1.2.0 (for GNU/Linux)
Cancel-Lock: sha1:s/yzqb6vz9Eamxc+bR+HeHDjSmY= sha256:DQ8PsVC4FbL1jrxAvCR/IsvzIKT9JCoIj6ViLnefu1E=
sha1:Y7J/NOzDNhuiDqCBYVjLW02VVf4= sha256:p7bM0/Ii0keaM6QtRhWE0Mnp+b1LNTnfGU3Ho3o6/Y4=
sha1:+0Wqe1PIxJAh26AyFM+Ag0oj7ik= sha256:BC6ecM3PjMPYNuD1h/AgAWfOSsAWFUu6IdKkrC+4J2A=
 by: yamo' - Fri, 26 Jan 2024 13:18 UTC

Hi,

Retro Guy a tapoté :

> Yes, it looks like it's already been caught by NoCeM.
> https://www.novabbs.com/SEARCH/search_nocem.php?msgid=%3C92c9f6ba97ab8e709375e93e73adbe5d%40www.novabbs.com%3E

Thanks but some are some false positive on fr.* whith your nocem notices.

Another one (from other feed?) :
<https://www.novabbs.com/SEARCH/search_nocem.php?msgid=%3C1ac4183fc97f4a9f703a32b091b5b991%40rocksolidbbs.com%3E>

But I'm working on calling SpamAssassin inside cleanfeed, those spam are goods exercices...

--
Stéphane
Sorry for my bad English

Re: spam

<2d5a3d6382d46ebe2e3eb1b25ac4f809$1@www.novabbs.org>

  copy mid

https://news.octade.net/rocksolid/article-flat.php?id=278&group=rocksolid.nodes.help#278

  copy link   Newsgroups: rocksolid.nodes.help
Path: i2pn2.org!.POSTED!not-for-mail
From: retroguy@novabbs.org (Retro Guy)
Newsgroups: rocksolid.nodes.help
Subject: Re: spam
Date: Fri, 26 Jan 2024 08:20:37 -0700
Organization: Rocksolid Light
Message-ID: <2d5a3d6382d46ebe2e3eb1b25ac4f809$1@www.novabbs.org>
References: <AABlshyrwA4AAGkm.A3.flnews@yamo.pasdenom.info> <uoua2r$gjfp$1@i2pn2.org> <2dc8d6d77da2d09ad326592d4649ec63$1@www.novabbs.org> <AABls7ETF2IAAGkm.A3.flnews@yamo.pasdenom.info>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Injection-Info: i2pn2.org;
logging-data="639702"; mail-complaints-to="usenet@i2pn2.org";
posting-account="PGd4t4cXnWwgUWG9VtTiCsm47oOWbHLcTr4rYoM0Edo";
User-Agent: 40tude_Dialog/2.0.15.41
X-Spam-Checker-Version: SpamAssassin 4.0.0
 by: Retro Guy - Fri, 26 Jan 2024 15:20 UTC

On Fri, 26 Jan 2024 14:18:11 +0100, yamo' wrote:

> Hi,
>
> Retro Guy a tapoté :
>
>> Yes, it looks like it's already been caught by NoCeM.
>> https://www.novabbs.com/SEARCH/search_nocem.php?msgid=%3C92c9f6ba97ab8e709375e93e73adbe5d%40www.novabbs.com%3E
>
> Thanks but some are some false positive on fr.* whith your nocem notices.
>
> Another one (from other feed?) :
> <https://www.novabbs.com/SEARCH/search_nocem.php?msgid=%3C1ac4183fc97f4a9f703a32b091b5b991%40rocksolidbbs.com%3E>
>
> But I'm working on calling SpamAssassin inside cleanfeed, those spam are goods exercices...

Thanks again. This one got through because so far I have not filtered
..test. This same user was blocked by spamassassin trying to post to other
groups. From what I can see, this is the only post that succeeded (because
it's .test).

I may block .test in the future, but was allowin testing the previous
years.

Also, if I'm sending false positve NoCeM that you are aware, please feel
free to let me know what articles so that I can fix it. Thanks :)

Re: spam

<AABls-ivl4UAAGkm.A3.flnews@yamo.pasdenom.info>

  copy mid

https://news.octade.net/rocksolid/article-flat.php?id=280&group=rocksolid.nodes.help#280

  copy link   Newsgroups: rocksolid.nodes.help
Path: i2pn2.org!i2pn.org!nntp.comgw.net!paganini.bofh.team!pasdenom.info!.POSTED.2a01:e0a:21:ea80:dee4:9d8:7b92:f2dd!not-for-mail
From: yamo@beurdin.invalid (yamo')
Newsgroups: rocksolid.nodes.help
Subject: Re: spam
Supersedes: <AABls-bzdxkAAGkm.A3.flnews@yamo.pasdenom.info>
Date: Fri, 26 Jan 2024 19:23:43 +0100
Organization: <http://pasdenom.info/news.html>
Message-ID: <AABls-ivl4UAAGkm.A3.flnews@yamo.pasdenom.info>
References: <AABlshyrwA4AAGkm.A3.flnews@yamo.pasdenom.info> <uoua2r$gjfp$1@i2pn2.org> <2dc8d6d77da2d09ad326592d4649ec63$1@www.novabbs.org> <AABls7ETF2IAAGkm.A3.flnews@yamo.pasdenom.info> <2d5a3d6382d46ebe2e3eb1b25ac4f809$1@www.novabbs.org>
Reply-To: yamo' <yamo@groumpf.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=fixed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 26 Jan 2024 18:23:43 -0000
Injection-Info: rasp.pasdenom.info; posting-account="stephane@usenet"; posting-host="2a01:e0a:21:ea80:dee4:9d8:7b92:f2dd";
logging-data="32581"; mail-complaints-to="abuse@pasdenom.info"
User-Agent: flnews/1.2.0 (for GNU/Linux)
Cancel-Key: sha1:kdzKKg2gIquarDgO7t5dSNuG8a4= sha256:Y3eQmjrPaz4fufYCYUm//dyus8LJINbZ2GMngHGWh0M=
sha1:e6vJGyLQUUgIabfICku+5BhcAgI= sha256:Syx7fkE2mBe7Bb+rdZgdVTleAPqHk9ES4+kASDYFn0k=
Cancel-Lock: sha1:Ac2HT4PWQJwVUiYMjuYZ+cua/Aw= sha256:tLbnq2pVHfgIi2yeCZYLn35lG9kQ8Yjg+7GdgK7kUlI=
sha1:DoWS9+cvL6cPzWvkwiDd2dJ3itg= sha256:D3SHyVwLeAwDKzBcxxZmE+5dVZYg8UDzHXnROUnOwE8=
sha1:kpWKwApoTbzjYKYv2CVgDv0TGI0= sha256:TduUpk/5xevMlgco0XVCoxI480GHIRAr1dkRpXftA98=
 by: yamo' - Fri, 26 Jan 2024 18:23 UTC

Hi,
Retro Guy a tapoté :
>
> Also, if I'm sending false positve NoCeM that you are aware, please feel
> free to let me know what articles so that I can fix it. Thanks :)

Thanks for your work!

This one by example :
<https://www.novabbs.com/SEARCH/search_nocem.php?msgid=%3Cc49bb132-4f24-4fb5-b0a8-af331abe6340n%40googlegroups.com%3E>

Not a very good example. Sorry It can be considered has a spam.

My bot also sent a NoceM notice but a spam3 notice ;
(I have to be more specific that spam/nospam).

--
Stéphane

rocksolid / Rocksolid Nodes Help / Re: spam

1

rocksolid light 0.9.152
clearnet tor