The worst thing is that this authenticated spam gets added to my "notspam" files, polluting my bayesian corpus.
At 08:58 AM 1/11/2010, GrayHat wrote: > >> As for tracking such issues (and others) I'd suggest you to use > >> the "outbound rate limiter" option; expand the "relaying" section > >> in ASSP GUI and scroll down, you'll find the entries named > >> "LocalFrequencyInt" and "LocalFrequencyNumRcpt" for a start > >> set them to 1800 and 120, that means that if a given sender > >> will go over the imposed "outbound email" limit ASSP will reject > >> the message with an error (retry after...); now, to get a notify for > >> such an event, Locate the "notifyRe" under the "Logging" > > > Normally this would have caught this one...except it was sneaky. It > > was only sending out about 15-20 messages a day, in batches of 4-5 > > messages every few hours. Obviously spammers are trying to stay under > > the radar instead of flooding servers with spam and setting off > > alarms. The only reason I caught this one is because I was doing log > > analysis for something else. > >Scott... that's something I know and (Thomas can tell that) I suggested >in >a recent past to setup some countermeasures in ASSP so that it wouldn't >just act as a filter for "incoming spam" but would also work for >"outgoing >spam" :) the first attempt was that "rate limiter" which is quite good, >I just >hope that Thomas may add bayes checking for outbound as well, that >would allow to BLOCK messages above a given "limit" or at least to set >up things so that admins will get an alert, this, added to the >rate-limiter and >to an AV scan for outgoing messages (already in place) could allow to >get in control of junk flowing out from our networks and hopefully to >clean >up them and help making the internet a better place > > >------------------------------------------------------------------------------ >This SF.Net email is sponsored by the Verizon Developer Community >Take advantage of Verizon's best-in-class app development support >A streamlined, 14 day to market process makes app distribution fast and easy >Join now and get one step closer to millions of Verizon customers >http://p.sf.net/sfu/verizon-dev2dev >_______________________________________________ >Assp-test mailing list >[email protected] >https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
