I noticed that you don't block any dynamic networks. I suggest you add = this to your main.cf file reject_rbl_client dul.dnsbl.sorbs.net in smtpd_recipient_restrictions.=20
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] = On Behalf Of Len Conrad Sent: Friday, December 26, 2003 9:51 PM To: [EMAIL PROTECTED] Subject: [IMGate] Re: IMGate.. expiring ? >We've been using IMGate for a year now, and it seems that it's becoming = out >of date. there is no such process. >Well, when I first setup IMGate, it filtered out nearly 95% of overall spam. >(Maybe 1 or none spam in a day.) But after a year, I receive nearly ~12 >spams a day. God knows how many I'm going to receive if I plug IMGate = off. >This could mean 2 things, first, spammers got smarter yes, and they started spamming from new addresses > and they can easily override this machine now no >OR the amount of spam increased SO much over a >year that IMGate still filtering 95% of the spam but in the big picture = it >doesn't do any good IMGate still works > since we're all receiving more than 10 spams a day. there is certainly more spam volume that a yeag ago, and there will be = more=20 next year. >IMHO Public wireless networks are the main reason for this rapid = increase. A large, increasing source of spam is from subscriber networks (cable, = DSL,=20 ISDN in Europe), so the subscriber filter would probabl add a lot of = rejects >Hmm, any ideas ? you need to add some more blacklists, look at pflogsumm reports daily = and=20 for a whole month to see what IPs and ClassCs are connecting too much, = look=20 at the 4tuple reports for received msgs to block, etc, etc. Len
