On Fri, 2007-10-26 at 14:05 -0400, Micheal Espinola Jr wrote:
> William L. Thomson Jr. wrote:
> > However the amount of this has increased so much with 1.3.3.8. I don't
> > know what to do. I have even turned on other new features I wasn't using
> > in the past. I am really at a loss over all this.
> 
> As far as I can tell and see in my own production use and tests, the PB
> functionality has not changed in a way to be the cause of what you are
> seeing.

Also since 1.2.6, and 1.3.3.8 I have started using the Deny SMTP
Connections from IP feature, via denyalways.txt file list. That was
mostly for the ones that were bugging me back when I was running 1.2.6
and continued with 1.3.3.8.

> Based on your description, I can only assume that you are being targeted
> by a spam /botnet/ - and are getting spammed with the same exact message
> - but is sent/relayed from a wide range of IP addresses.  Since the PB
> blocks based on the IP, this could be an explanation.

Well I have looked into several of these. Only 1 or 2 patterns, 1 of
which existed with 1.2.6. I could consider a spam/botnet or etc.

The vast majority seems to be legit email lists or etc. Which I know is
not an attack. From looking at many of say the 50 dups, 13 shoebuy.com
and others. They are all coming from the same server, ip and etc. One or
two seemed to come from a pool of mail servers. But those domains and
IP's were consistent.

Some are being rejected mistakenly. Which I could accept say up to 5-10.
But in the range of 50 valid ones rejected as spam. Seems PB or
something should kick in, till I find out about it, and have a chance to
deal with it. Since the Bayesian is falsely rejecting some of them.

-- 
William L. Thomson Jr.
Gentoo/Java

Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to