Jay G. Scott put forth on 11/12/2010 9:55 AM:
> On Fri, Nov 12, 2010 at 02:05:16AM -0600, Stan Hoeppner wrote:
>> What anti-spam measures are you currently using?
>
> puremessage, which is a commercialized spamassassin. they supply
> an RBL.
>
> and i'm not interested in spam per se. my users aren't complaining
> about spam. however, it would be nice if the __malware__ that
> gets sent by email would drop dead. if greylisting, etc.
> don't do me any good i won't run them, but i have hopes that some
> of the stuff that's presently not getting rated high enough
> as spam to be rejected will get clobbered by greylisting or spf.
> yes, puremessage has virus checkers, and i run them, but i'm willing
> to try everything.
Are you using "reject_rbl_client zen.spamhaus.org" or any other dnsbls?
Zen includes the CBL which blocks a lot of zombies, which should be
blocking a lot of that malware. Add these to your config if you don't
already have them, under smtpd_recipient_restrictions:
reject_rbl_client zen.spamhaus.org
reject_rbl_client psbl.surriel.com
reject_rhsbl_client dbl.spamhaus.org
reject_rhsbl_sender dbl.spamhaus.org
reject_rhsbl_helo dbl.spamhaus.org
> RE: spf -- i didn't know, so i'll drop it. but we get a lot
> of bounce msgs from spam we (didn't) send, and i wish that would
> drop dead. ah, well.
See: http://www.postfix.org/BACKSCATTER_README.html
Also, it may be beneficial if you were to post your "postconf -n" output
to the mailing list so we can suggest changes to help you accomplish
your goals, and for general sanity checking.
--
Stan
