for simcontrol please refer to this link http://wiki.qmailtoaster.com/index.php/Simscan ----- Original Message ----- From: Alberto Maffini To: [email protected] Sent: Monday, July 28, 2008 5:43 PM Subject: Re: [qmailtoaster] Hardening QM to fight spam
Ok :-) My question was "What I have to put inside those files to fight spam ?" ... Sorry for not explain correctly .. Alberto Maffini mobile +39.348.3677402 Sylco S.r.l.Via Pisa, 250 Sesto San Giovanni (MI) Tel +39.02.2427557 Fax +39.02.2400608 http://www.sylcomed.com ----- Original Message ----- From: Anil Aliyan To: [email protected] Sent: Monday, July 28, 2008 2:03 PM Subject: Re: [qmailtoaster] Hardening QM to fight spam Simply Create those files (simcontrol, badmailfrom and blacklists) again and put whatever u want to scan and block. ----- Original Message ----- From: Alberto Maffini To: [email protected] Sent: Monday, July 28, 2008 5:24 PM Subject: Re: [qmailtoaster] Hardening QM to fight spam Are you talking about recompile all the software ? Do I will loose all the mailboxes ? Alberto Maffini mobile +39.348.3677402 Sylco S.r.l.Via Pisa, 250 Sesto San Giovanni (MI) Tel +39.02.2427557 Fax +39.02.2400608 http://www.sylcomed.com ----- Original Message ----- From: Janno Sannik To: [email protected] Sent: Monday, July 28, 2008 1:41 PM Subject: Re: [qmailtoaster] Hardening QM to fight spam get the packages. rebuild them (might not even be necessary) and extract the needed configuration files from packages. my spamassassin configuration has following new lines (5 points is still the spam limit): skip_rbl_checks 0 score BAYES_99 4.9 score DRUGS_ERECTILE 4.0 score DRUGS_ERECTILE_OBFU 4.0 score NO_DNS_FOR_FROM 10.0 score DRUGS_PAIN 4.0 score MALE_ENHANCE 4.0 # dnsbl-1.uceprotect.net header RCVD_IN_UCEPROTECT1 rbleval:check_rbl('uceprotect1', 'dnsbl-1.uceprotect.net.','127.0.0.2') describe RCVD_IN_UCEPROTECT1 Received via a blocked site in dnsbl-1.uceprotect.net tflags RCVD_IN_UCEPROTECT1 net score RCVD_IN_UCEPROTECT1 4.0 # dnsbl-2.uceprotect.net header RCVD_IN_UCEPROTECT2 rbleval:check_rbl('uceprotect2', 'dnsbl-2.uceprotect.net.', '127.0.0.2') describe RCVD_IN_UCEPROTECT2 Received via a blocked site in dnsbl-2.uceprotect.net tflags RCVD_IN_UCEPROTECT2 net score RCVD_IN_UCEPROTECT2 1.0 # dnsbl-3.uceprotect.net header RCVD_IN_UCEPROTECT3 rbleval:check_rbl('uceprotect3', 'dnsbl-3.uceprotect.net.','127.0.0.2') describe RCVD_IN_UCEPROTECT3 Received via a blocked site in dnsbl-3.uceprotect.net tflags RCVD_IN_UCEPROTECT3 net score RCVD_IN_UCEPROTECT3 1.0 Alberto Maffini wrote: Hi List...I successfully run a QMT mailserver since 2 years ago. 1 month ago I had a problem. For some reason my delivery was very slow (approx 30 sec). I found that the problem was Spamhaus checking. Due to my stupidity I deleted /var/qmail/control/simcontrol and /var/qmail/control/blacklists and /var/qmail/control/badmailfrom. Since that moment I am receiving tons of spam mail Is there someone can help me hardening the sistem fighting spam ? Following a sample message: Received: (qmail 19970 invoked by uid 89); 28 Jul 2008 11:24:53 -0000 Received: by simscan 1.3.1 ppid: 19965, pid: 19967, t: 0.4072s scanners:none Received: from unknown (HELO ns2.qmailtoaster.com) (209.177.154.102) by ariel.sylcomed.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 28 Jul 2008 11:24:53 -0000 Received-SPF: none (ariel.sylcomed.com: domain at qmailtoaster.com does not designate permitted sender hosts) Received: (qmail 20998 invoked by uid 89); 28 Jul 2008 12:14:49 -0000 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Post: <mailto:[email protected]> List-Help: <mailto:[EMAIL PROTECTED]> List-Unsubscribe: <mailto:[EMAIL PROTECTED]> List-Subscribe: <mailto:[EMAIL PROTECTED]> Reply-To: [email protected] Delivered-To: mailing list [email protected] Received: (qmail 20991 invoked by uid 89); 28 Jul 2008 12:14:49 -0000 X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on ns2.qmailtoaster.com X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=AWL,BAYES_00,DK_SIGNED, HTML_50_60,HTML_MESSAGE,SARE_SUB_OBFU_Q1 autolearn=no version=3.1.8 Received-SPF: pass (ns2.qmailtoaster.com: SPF record at _spf.google.com designates 64.233.182.184 as permitted sender) Thanks a lot Alberto Maffini mobile +39.348.3677402 Sylco S.r.l.Via Pisa, 250 Sesto San Giovanni (MI) Tel +39.02.2427557 Fax +39.02.2400608 http://www.sylcomed.com __________ Informazione NOD32 3302 (20080728) __________ Questo messaggio è stato controllato dal Sistema Antivirus NOD32 http://www.nod32.it __________ Informazione NOD32 3302 (20080728) __________ Questo messaggio è stato controllato dal Sistema Antivirus NOD32 http://www.nod32.it
