On Apr 16, 2007, at 7:25 PM, Jim Shupert, Jr. wrote:
Friends,
In my ongoing battele against SPAM ...
I have done blacklists-moderate
-r zen.spamhaus.org -r bl.spamcop.net -r list.dsbl.org -r
cbl.abuseat.org
But I am thinking I must have something amiss... out of 200 emails
only 8 were marked spam..
this is because these blacklists go into effect before SpamAssassin
does; only the mail that makes it past the blacklists is ever even
scanned by SpamAssassin.
to put it another way: the blacklists stopped so much spam that they
only let by 8 false positives out of 200 emails. that's not great,
but how does it compare to how you were doing before?
There must be a log that I can look at that will show me how hard
it is working.
How can I 'see' more about what simscan - spamassassin is doing?
look at /var/log/qmail/smtp/current and grep for "rblsmtpd"; every
time you see a line that looks like this:
2007-04-16 19:35:39.092940500 rblsmtpd: 70.23.21.6 pid 2015: 451
http://www.spamhaus.org/query/bl?ip=70.23.21.6
it means that rblsmtpd refused an incoming SMTP connection based on a
blacklist (in this case spamhaus). you can pipe the output of the
grep through "tai64nlocal" to convert the datestamps to local time.
if you have the qmailmrtg-toaster package installed (which you
probably do), look at http://your.toaster.com/stats-toaster/ and find
the "Smtp Allow/Deny" section; you'll see graphs documenting how many
SMTP connections are being denied.
-steve
--
If this were play'd upon a stage now, I could condemn it as an
improbable fiction. - Fabian, Twelfth Night
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
