Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

The earth is like a tiny grain of sand, only much, much heavier.


computers / news.admin.net-abuse.usenet / [DOC] NoCeM - What you need to know

SubjectAuthor
o [DOC] NoCeM - What you need to knowfaq

1
[DOC] NoCeM - What you need to know

<faqbot-fr.45172.0108006134@usenet.ovh>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=1770&group=news.admin.net-abuse.usenet#1770

  copy link   Newsgroups: news.admin.net-abuse.usenet news.answers
Followup: news.admin.net-abuse.usenet
Path: i2pn2.org!i2pn.org!paganini.bofh.team!usenet.ovh!faq.usenet.ovh!.POSTED!not-for-mail
From: faq@usenet.ovh (faq)
Newsgroups: news.admin.net-abuse.usenet,news.answers
Subject: [DOC] NoCeM - What you need to know
Followup-To: news.admin.net-abuse.usenet
Date: Sat, 2 Sep 2023 22:15:33 -0000 (UTC)
Organization: Alfa Network En Travaux
Approved: faq@usenet.ovh
Message-ID: <faqbot-fr.45172.0108006134@usenet.ovh>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 2 Sep 2023 22:15:33 -0000 (UTC)
Injection-Info: faq.usenet.ovh; posting-account="faq";
logging-data="67788"; mail-complaints-to="abuse@usenet.ovh"
Cancel-Lock: sha256:0YTK5zJgtSuD2hpnyTGPPwepNyy+H3REgTmxIA+q0O8=
 by: faq - Sat, 2 Sep 2023 22:15 UTC

Contents :
1 - Preamble
2 - Definition of NoCeM
3 - NoCeM or Cancel?
4 - Nocem issuers
5 - Descriptions and tips on existing nocems
6 - Conclusion
7 - References

1 - Preamble

This document, posted monthly, list the nocems currently published
on the "news.lists.filters" group.
It does not deal with nocems published in a local hierarchy.
The aim is to publicize existing general nocems so that server
administrators can decide which nocems they wish to apply or not.

2 - Definition

NoCeM (pronounced No See 'Em) is a modern solution for managing spam.

Rather than issuing a "cancel" on a spam message that most servers will
reject, we generate a message in the "news.lists.filters" group called
"nocem", which contain the message(s) to be deleted.

Each nocem is signed with a gpg key to guarantee its authenticity.

The manager of each server is free to apply these nocems or not,
unlike global cancels, nothing is imposed.

3 - NoCeM or Cancel?

- Using nocems requires the server administrator to modify its configuration
to accept them. Otherwise, the nocem does nothing on the server.
It's a simple text message.

- Cancel, on the other hand, is accepted by default by the server
configuration. It's up to the server administrator to modify his config
to refuse certain types of cancels. This is not always easy.

For example, the news.usenet.ovh server refuses cancels from miakibot
because of past abuse. But the server configuration had to be modified
for this. Servers with little administration or little knowledge of "fr"
specificities generally keep the default config.

Reminder: general NoCeMs are published in news.lists.filters.

4 - Nocem issuers

- " bleachbot " (bleachbot@httrack.com) : The oldest and best-known

- " nocembot " (nocem@usenet.ovh) : The latest bot

- " nono le petit robot " (robot@pasdenom.info) : The atypical robot using
spamassasin

- " NoCeM ALPHANET big8 " (nocem-fr@alphanet.ch) : nocems.

5 - Descriptions et conseils sur les nocems existants

5.1 - " bleachbot "

Information : http://home.httrack.net/~nocem/

Public key : http://home.httrack.net/~nocem/bleachbot.asc

Types of nocems :
- spam : detection based on previously confirmed spam with BI>=20.
- site : flood and hipcrime detection.

Tip: Nocem has been a recognized source for years.
Recommended for use on all servers.

5.2 - " nocembot "

Information : http://usenet.ovh/?article=nocem

Public key : http://usenet.ovh/files/alfanet_0x5789E33A_public

Types of nocems :
- spam : spams and clearly malicious articles
- flood : well-known regular flooders

Tip: New public Nocems source since June 5, 2023
(previously restricted to the news.usenet.ovh server).
The website details what is filtered.
Recommended for use on all servers.

5.3 - " nono le petit robot "

Information : https://pasdenom.info/nocem.html

Public key : http://pasdenom.info/gpg/robot.pasdenom.asc

Types of nocems :
- spam : spams 99,99%
- spam2 : spams with rare false positives
- spam3 : spam with false positives
- spam4 : spams with slightly more false positives
- site : rare manual notices

Tip: these nocems are the result of the use of "spamassasin".
An effective product usually used to detect spam in e-mails.
Type "spam" nocems are reliable, the others generate false positives.
Particularly spam3 and 4, which on certain forums such as fr.soc.politique
could be seen as censorship.
The "site" nocem is used for abuse that is generally consensual.
Recommended use of "site" and "spam" nocems on all servers

5.4 - " NoCeM ALPHANET big8 "

Information :
https://git.alphanet.ch/gitweb/?p=alphanet-faq;a=blob;f=alphanet/nocem-types

Public key :
https://git.alphanet.ch/gitweb/?p=usenet-fr-faq;a=blob_plain;f=usenet/abus/d/NoCeM/pubkey/all;hb=HEAD

Types of nocems:
- spam : spam on big8 groups.

New, more or less curious types of nocems are published
(non-exhaustive list):
- cleanfeed-emp
- cleanfeed-too-many-newsgroups
- cleanfeed-binary-non-binary-distribution
- cleanfeed-hierarchy-violation--crosspost-outside-netscape
- cleanfeed-post-to-junk-newsgroup
- cleanfeed-hierarchy-violation--crosspost-outside-sdnet
- cleanfeed-bot-signature
- cleanfeed-hierarchy-violation--crosspost-outside-de.alt.dateien
note: many types of nocems (against mashed potatoes, ducks etc.) are only
published on a french-speaking group and outside the scope of this document.
Tip: As they stand, we strongly advise against using these nocems
because their content does not always correspond to the description
of this type of nocem.

For example, the SPAM type confuses "spam" with "flood".
Message-ID:
<nocem.ALPHANET.fr.20230607123506.28943.16@nocem.alphanet.ch>
or this nocem cancels a flood post
<nocem.ALPHANET.fr.20230607123506.28943.16@nocem.alphanet.ch>
from a well-known flooder: " Socratis T.n.p".
There's also " Pentcho Valev ", " Lucrezio S " etc

6 - Conclusion

If you want to contribute to this document, you can reply directly
to this message (or by e-mail if you prefer).

7 - References:
- The NoCeM FAQ. V0.93: http://www.cm.org/faq.html
- Kleopatra: https://www.openpgp.org/software/kleopatra/
(certificate manager and GUI for GnuP)
- Global cancels: <news:m25ylayonf.fsf@raybanana.net>

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor