Hi.

On Saturday 13 September 2008, Ray Collazo wrote:
> If you know of a better way to get rid of Junk Mail coming from bots and
> zombies, I'm all ears.

Greylisting and HELO-check.

Those are two of the great inventions of the past years as the concepts do not 
hurt any RFC-compliant sender. Everybody can behave correctly, no matter what 
IP-address he uses.

We have a very conservative greylisting-setup with extended whitelisting 
abilities to not loose regular mail. 

Additionally, we use the "zombie"-list from sorbs for hard blacklisting and 
have activated the courier-HELO-check for all hosts that are suspicious on 
various DNSRBLs. (Disclaimer: HELO-check fails on a lot of regular senders, 
so use HELO-checking only for suspicious hosts that you would block at the 
moment.)

Since we set this combination up, we don't have a spam problem any more. All 
our users can use spamassassin for the varios spams that originate from AOL, 
yahoo or something like this and cannot be blocked otherwise. But even 
without this, there's not much spam any more.



Sure, blocking all and every suspicious IP address is the easiest way to go 
and most of the "mainstream" customers will not be hurt by this, as long as 
you don't block AOL.

But I think it's not a good idea to block someone just because of his 
IP-range. The zombie-list contains single hosts that have sent many spams. 
The DUL contains IP addresses that did nothing wrong but just belong (or did 
so some time ago) to an ISP that does dynamic allocation.

regards, Bernd

-- 
Windows Error 019: User error. It's not our fault. Is not! Is not!

Attachment: signature.asc
Description: This is a digitally signed message part.

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to