Patrick Powell wrote: > Just for your interest, there were 11121 spam attack messages sent to > the LPRng mailing list since about 3:00 pm PST on Friday and > 7:15 am PST on Monday. > > I am installing SpamAssassin as a first line defence against this. > > Any other suggestions?
SpamAssassin is about the best option. If you turn on the bayesian filtering and RBL tests, and train the bayes engine with a suitable amount of spam and ham, it's very effective. At my site I drop connections at the gateway for IP addresses in sbl-xbl.spamhaus.org, scan mail with ClamAV and reject viruses/worms in the SMTP phase, and then run everything that's left through SpamAssassin with network tests and bayesian checking. This eliminates over 99% of it, but getting rid of the last bit is always the hardest. Integrating Razor/DCC with SpamAssassin may also pay dividends. > I wonder what other email lists are doing to control Spam attacks? One list I'm on greylists people using GNU SAUCE. Any mail received by the MTA is rejected with a 450 temporary failure. If the sending system retries a few times, the mail is allowed through, and the sender address is added to a whitelist. Senders on the whitelist are not delayed in future. Spammers pretty much never retry, so this effectively cleans the list, at the price of delaying legitimate mail from first time posters by a couple of hours. I personally don't really like the approach, but spam is becoming such a blight that these things are getting more necessary. Various other bits of software are also offering greylisting these days. Mike. ----------------------------------------------------------------------------- YOU MUST BE A LIST MEMBER IN ORDER TO POST TO THE LPRng MAILING LIST The address you post from or your Reply-To address MUST be your subscription address If you need help, send email to [EMAIL PROTECTED] (or lprng-requests or lprng-digest-requests) with the word 'help' in the body. To subscribe to a list with name LIST, send mail to [EMAIL PROTECTED] with: | example: subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED] unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED] If you have major problems, call Patrick Powell or one of the friendly staff at Astart Technologies for help. Astart also does support for LPRng. Also, check the Web Page at: http://www.lprng.com for any announcements. Astart Technologies (LPRng - Print Spooler http://www.lprng.com) 6741 Convoy Court San Diego, CA 92111 858-874-6543 FAX 858-751-2435 -----------------------------------------------------------------------------
