i don't think we discussed spamtraps here, so i'm willing to share some 
experience and gather your comments. Maybe this can be the start for a good 
wiki article.

some notes :

-) pb is about penalizing ip (connections), and spamtraps don't necessarly 
mean that an ip is a trojaned computer or a spammer host.
-) you need to have validate local addresses enabled
-) you need to turn enable validation logging on

i use spam control
-) Spam Collect Addresses   for 'so and so' spamtraps
-) Spam Trap Addresses  for good spamtraps

and of course i penalize pb/invalid recipient (and pb/empty recipient and 
pb/max errors, that you get when a spammer does a dictionary attack)

pb score is (ymmv):

- Invalid recipient : 2
- Spam Collect : 5
- Spamtrap : 10

in spam collect i put old email addressed that are no longer in use and 
returned a 5xx for more than 1 year
in spam trap i put real spamtraps. Very often not existant addresses are on 
spammer lists.

this is the script i use to grep all invalid recipients from my logs, and 
sort them.

Windows users need to download some GNU utils from 
http://unxutils.sourceforge.net/   (unixutils + unxupdates)

mac users ? no idea, sorry... but at least win+linux are covered.

I had a few problems with multiple piping and gawk under win32, so i had to 
use prog.awk to script it and use a few intermediare steps, maybe someone 
can optimize it.

----- windows version, with assp installed in c:\assp ------ 

-) invalid.cmd - debug version

dir /o-d /b \assp\logs\*aillog.txt|sed "s/\ /\\\ /g"|gawk -f prog.awk| 
grep -F "rejected:" > _aa
cut -d" " -f8 _aa | sort | uniq -c | sort -r > _bb
head -n 35 _bb > invalid.txt


-) prog.awk

BEGIN{
}
NR < 15 {
system("type \\assp\\logs\\" $0)
}
END{
}


under windows you can use blat (http://www.blat.net/) to have the list 
mailed to you. Of course you have to manually decide what addresses are for 
spamcollect, and what for spamtrap. 

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to