ashok, Are the virus programs using their own MTA or do they go through the qmail server?
If they're bypassing the qmail server, I'd configure the firewall at the gateway to block SMTP traffic coming from the local network that isn't from the qmail server. If they're coming through qmail, we'll have to come up with some other remedy. BL, as always, is to get rid of the viruses. ashok wrote: > Hi Jared,, > > > > Thanks you so much for the clear information …J > > > > Okai I now Im just using --- "-r sbl-xbl.spamhaus.org -r > bl.spamcop.net alone. > > > > Only problem is with Blacklisting of my Gateway IP [Public IP] due to > which My LAN users [Private Ips Nated ] will not be able to send mails. > > > > Everytime my IP blocked I put a request to unblock it … But now its > happening frequently. > > > > This happens due to virus attack in LAN and those viruses start > sending emails out from Private LAN – Nated to using gateway IP to > Internet . > > > > Pls Suggest me a way to fix this . > > > > Thanks & Regards > > ashok > > > > ------------------------------------------------------------------------ > > *From:* Jared Markell [mailto:[EMAIL PROTECTED] > *Sent:* Wednesday, October 11, 2006 9:18 PM > *To:* [email protected] > *Subject:* RE: [qmailtoaster] Spamassassin how-to improve spam catch > > > > Well, the real solution would be for you to get your IP unblocked. > > > > And about the blacklists you put in your blacklists file, just a note to > keep in mind, that for each of the addresses you add to that list, is > another lookup the toaster has to check against before allowing the > email into your system. If you have 10 addresses in your blacklists > file, that's 10 lookups your server has to do for every email inbound. > On medium to high volume servers, this can drastically clog your server > to a very poor condition where incoming emails will get bounced just > because the server has too many emails waiting to come in. Just > something to keep in mind.. > > > > Is the line below the actual contents of your blacklist? > > "-r sbl-xbl.spamhaus.org -r bl.spamcop.net -r bl.csma.biz -r > spamsources.fabel.dk -r dnsbl.njabl.org -r relays.ordb.org -r d" > > > > If so, you need to remove the last "-r d". That is a bad typo. Heck, > removing this could solve your problems all together. > > > > Taking into what I said before about having too many files in the > blacklists file; The way I solved my spam issues was to use just the > spamcop BL lookup, but also use Rules Du Jour spam assassin rules. Also, > I lowered my spam ratings to 4 and 8. (4 to get marked as SPAM, 8 to get > deleted). The default is 5 and 12. I think those are too lenient. > > > > **Jared** > > > > ------------------------------------------------------------------------ > > *From:* ashok [mailto:[EMAIL PROTECTED] > *Sent:* Wednesday, October 11, 2006 8:36 AM > *To:* [email protected] > *Subject:* RE: [qmailtoaster] Spamassassin how-to improve spam catch > > Hello Frnds,, > > > > Even I was facing problem with SPAM .. which I use to get like Viagra , > necklace watches , antrim etc…. > > > > And I enabled > > > > -r sbl-xbl.spamhaus.org -r bl.spamcop.net -r bl.csma.biz -r > spamsources.fabel.dk -r dnsbl.njabl.org -r relays.ordb.org -r d > > > Now the problem I faced is … > > > > My gateway IP address got Blacklisted ..when I check in www.dnsstuff.com > <http://www.dnsstuff.com/> [ SPAM Database ] due to this my LAN users > are not able to send emails. > > > > Pls suggest me wat I need to do. > > > > Thanks in advance.. > > > > Regards > > ashok > > > > ------------------------------------------------------------------------ > > *From:* Marco Cordeiro [mailto:[EMAIL PROTECTED] > *Sent:* Wednesday, October 11, 2006 8:15 PM > *To:* [email protected] > *Subject:* RE: [qmailtoaster] Spamassassin how-to improve spam catch > > > > ok, I enable this feature too and so far so good ;-)) > > > > (I did the test describe in wiki page and seems to be working). > > > > thanks , Jake. > > > > ------------------------------------------------------------------------ > > *From:* Jake Vickers [mailto:[EMAIL PROTECTED] > *Sent:* Wednesday, October 11, 2006 11:26 AM > *To:* [email protected] > *Subject:* Re: [qmailtoaster] Spamassassin how-to improve spam catch > > Marco Cordeiro wrote: > > I did this : > > > > -r sbl-xbl.spamhaus.org -r bl.spamcop.net -r bl.csma.biz -r > spamsources.fabel.dk -r dnsbl.njabl.org -r relays.ordb.org -r d > nsbl.antispam.or.id -r opm.blitzed.org -r list.dsbl.org -r cbl.abuseat.org > > I'll watch for 1 week to know what's will happens > > > > That does help a lot (as long as Spamhaus remains alive), but you'll > probably still want to follow the instructions here: > http://wiki.qmailtoaster.com/index.php/SURBL > (sorry, I posted it as URIBL, but it's really under SURBL). As long as > you have the memory to spare for this, it's a great addition. > -- -Eric 'shubes' --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
