Ira Abramov wrote:
you know the type, lots of random text and the spam is in an attachment
that changes ever so slightly to avoid getting a unique signature for
razor/pyzor and friends.
.....
what do YOU do to fight this? the smartest filter I know is Google's and
even IT fails on some spams every day.
After compaints started to mount up from users, I decided to try
greylisting.
Installed it only yesterday so this is a very preliminary assessment.
Installation was a breeze. So far I see:
- No image spam at all in my mailbox (I would get at least 40-50 a day
up until yesterday)
- The load on the server has dropped quite a bit, since most of the
spam never gets to churn thru spamassassin's perl scripts.
- The implementation I chose (sqlgrey) maintains an auto whitelist of
domains (domain/IP combinations from which several mails have already
passed the greylisting). So far that list has grown to about 60 domains.
Domains like yahoo and gmail appear several times (their multiple MX IP
addresses). So mail from these is not delayed at all.
- There are over 45000 mails that were delayed waiting for the resend
which will probably never come since they are most likely spam from some
trojan or whatever...
I don't know how long this improvement will hold out, but so far I'm
pleased.
Cheers,
Micha
--
Micha Silver
Arava Development Co
+972-8-6592270
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
