Re: [qmailtoaster] Pls suggest on Spamassassin to catch spam

[George Sweetnam]

Jakes right, "CHKUSER_WRONGRCPTLIMIT="200"" is WAY too high.  One of our big servers averages over 5 messages a second and it's set to 3 (which might be a little low for some people).   The idea is to stop dictionary attacks to your domain... at worst you'll only get 3-5 messages through before they are told to go away.    George S.   ----- Original Message ----- From: Jake Vickers To: qmailtoaster-list@qmailtoaster.com Sent: Monday, October 16, 2006 6:35 AM Subject: Re: [qmailtoaster] Pls suggest on Spamassassin to catch spam ashok wrote: Dear All,, Im newbie for Spamassassin. I have installed qmail-toaster and running my qmail server fine. Only problem is with SPAM getting lots of Viagra , extra pounds ,online games etc These are the below info for you to analyse [EMAIL PROTECTED] ~]# cat /etc/tcprules.d/tcp.smtp #Once edited this pls execute #tcprules tcp.smtp.cdb  .tcp.smtp.tmp < tcp.smtp 127.:allow,RELAYCLIENT="" 206.13.200.66:allow,RELAYCLIENT="" #125.22.36.22:allow,RELAYCLIENT="" :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="200",CHKUSER_WRONGRCPTLIMIT="200" I can see the reason for 200 on the chkuser function, but 200 on the wrongrcptlimit is WAY too high. This should be more like 5 or 10. Add some more rules, and look at SURBL. They will help catch a lot of your spam. For the messages that are sending excerpts from books and pasting a GIF file over it, there's not  a good fix to this yet.