It’s been a crazy week. Long hours, lots of stuff piling on the todo list. Some catchup: I noticed that John Dowdell linked me on his new blog on Flash MX entitled JD on MX. It’ll be nice to get some punditry from a different perspective.

In an effort to answer, “who writes random($foo)?”, I’m typing up a little more recent about page. My current idea is to move all my old crap which is lying around either in tarballs on a backup drive or in variations of /old/, /old/old/ and /reallyold/ path structures and get them organized on the currently dormant leonardlin.com. This is my latest Wile E. Coyote plan for organizing my online crap. We’ll see how that works.

More Procmail fodder

A recent thread on webdesign-l discussing X-Mailer values strayed onto spam filtering by X-Mailer. Steve came up with a regexp that that matches 8.8.32 strings (which looks to generate no false positives – pure spam).

If I loosen up the match thusly:

/w{6,8}.w{6,8}.w{16,}/

I get 27 of 94653: 0.028525% and 144 of 6329: 2.275241% for non-spam

and spam, respectively. And if I actually pay attention to the files

in which I’m finding these X-Mailers, I discover that every last one

of them is either on SPAM-L or in a spam message I forwarded to an

abuse address. Voila. It’s a definite 100% spam signature. Cool.

:0

* ^X-Mailer:.*w{6,8}.w{6,8}.w{16,}

> /dev/null

This one russian host has been hitting the Star Guitar Video that I have on my server over and over again. Now, it’s not that bad bandwidth-wise, as it’s transferred about 350MB, but it’s just the way that it’s been going on that’s annoying. Over 25,000 hits and counting. Removing the file didn’t stop the host. I got so annoyed tonight that I put a block in my htacces and xinetd.conf files. I probably should have done that earlier. At least I don’t have this crap polluting my logs anymore (76% of the hits so far in April were from Russia. Coinciding with the same percentage of hits from a FlashGet user agent, of course). Grrr. Well, hopefully it’s solved now.