I'm noticing a fair amount of new spam that's managing to slip through an apparent "loophole" lately.
Our server is configured to score heavily on senders with a missing or invalid PTR, and that catches a lot of spam that might otherwise have made it through the other tests. An nslookup on such senders yields the following: [root@Server assp]# nslookup 208.79.210.89 Server: 10.0.0.15 Address: 10.0.0.15#53 Non-authoritative answer: *** Can't find 89.210.79.208.in-addr.arpa.: No answer No PTR, no mail, no problem. However, there's some new stuff that's failing the lookup with an error as follows: [root@Server assp]# nslookup 69.22.145.83 ;; Got SERVFAIL reply from 10.0.0.15, trying next server Server: 10.0.0.1 Address: 10.0.0.1#53 ** server can't find 83.145.22.69.in-addr.arpa: SERVFAIL No penalty is incurred and the message often makes it through. I'm thinking that the spammers have figured this out and are exploiting it as I'm suddenly seeing a lot more of this lately. So, would it be possible to add the ability to penalize reverse lookup errors just like you can with SPF errors now? I think it would help to eliminate a lot of this spam. On another note, thanks for fixing the bug where ASSP was not strictly blocking IPs listed for denySMTPConnectionsFromAlways. It works fine now and logs the rejections, although it does not appear to be counting the blocks on the stats page. "Denied SMTP Connections (strict)" under "SMTP Connection Statistics" stays at 0. Thanks again for such an epic piece of software. Cheers, Phil Quesinberry Vintage Telecom - VoIP Business Telephone Hosting Improve your business telephone services and save money (410) 921-6550 http://www.vintagetelecom.com ------------------------------------------------------------------------------ CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
