On Wed, May 22, 2013 at 5:32 PM, Daniel Fussell <[email protected]> wrote: > I'm in process of refreshing my mail servers from the metal up as we > speak. SpamAssassin is still king in my estimation. I started using > the full spamhaus xen list in postfix to block spam at connect time, and > that made a huge difference in my server load, and my average message > process time went from 23 seconds down to 14 seconds. > > I've done most all my training using just my own messages, a > semi-recycled honeypot that's been around forever (and consequently on > every spammer's list), and a pristine honeypot. Spam that is close to > my user's normal email occasionally gets through (mainly annoying > consultant's webinar invites). Ever since using the spamhaus list > though, I don't get enough spam to my honeypots to keep the training > data current. I'm thinking of exempting the honeypots from that check > as a remedy. > > In the last month, I've had a couple hundred snowshoe spams from the .pw > domains. After the user finally told me about it, I retrained and most > are now getting caught.
Great feedback, thanks! I may come back with more questions ;) Best, Gabe /* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
