New dilemma in my fight against SPAM. I updated the simcontrol file to include additional attachments and shortly all mail was blocked but I’m not sure why
What exactly is the function of spam_hits ? Block ALL mail after 12 hits ? Per hour per … ? Is simcontrol even in play anymore ? 03-11 18:05:44 policy_check: policy allows transmission 03-11 18:05:45 simscan:[2167]:ATTACH:0.5788s:msg.1394575545.33060.2168:10.189.254.17:…. 03-11 18:05:45 qmail-smtpd: qq hard reject (Your email was rejected because it contains a bad attachment: msg.1394575545.33060.2168): MAILFROM: 03-11 18:05:45 spamdyke[2166]: DENIED_OTHER from:…………………………...: 554_Your_email_was_rejected_because_it_contains_a_bad_attachment:_msg.1394575545.33060.2168 03-11 18:05:45 tcpserver: end 2166 status 0 qq hard reject (Your email was rejected because it contains a bad attachment: addr.1394576063.667266.2282) qq hard reject (Your email was rejected because it contains a bad attachment: addr.1394583394.337275.4588) qq hard reject (Your email was rejected because it contains a bad attachment: addr.1394583630.231858.4647) qq hard reject (Your email was rejected because it contains a bad attachment: msg.1394575545.33060.2168) qq hard reject (Your email was rejected because it contains a bad attachment: msg.1394581657.995523.4160) qq hard reject (Your email was rejected because it contains a bad attachment: msg.1394583827.844655.4665) qq hard reject (Your email was rejected because it contains a bad attachment: textfile0) qq hard reject (Your email was rejected because it contains a bad attachment: textfile2) qq hard reject (Your email was rejected because it contains a bad attachment: textfile4) :clam=yes,spam=yes,spam_hits=5,attach=.ade:.adp:.app:.asd:.asf:.asp:.asx:.avi:.bas:.bat:.bin:.chm:.cil:.cla:.class:.cmd:.com:.cpl:.crt:.csh:.css:.dll:.dot:.email:.eml:.exe:.fxp:.hlp:.hta:.htm:.html:.inf:.ins:.isp:.js:.jse:.ksh:.lnk:.mda:.mdb:.mde:.mdt:.mdw:.mdz:.mov:.mp3:.mpe:.mpeg:.mpg:.msc:.msi:.msp:.mst:.nws:.ocx:.ops:.pcd:.pif:.pl:.pm:.pot:.pps:.prf:.prg:.ps:.rar:.reg:.scf:.scr:.sct:.shb:.shm:.shs:.url:.vb:.vbe:.vbs:.vxd:.wav:.wmd:.wmf:.wms:.wmz:.wsc:.wsf:.wsh:.wsz:.xsl:.xlt:.xlw: Back to original and restarted :clam=yes,spam=yes,spam_hits=12,attach=.exe:.pif:.src On Mar 11, 2014, at 3:09 PM, Eric Shubert <[email protected]> wrote: > On 03/11/2014 12:04 PM, Eric Shubert wrote: >> Yes, blacklists will still help, but not this way. Specify them in the >> spamdyke.conf file. When spamdyke is installed, the control/blacklists >> file is not used (it's used by rblsmtpd, which is disabled when spamdyke >> is installed). > > Wrong. Sorry, I wasn't thinking. These rely on the sending server's IP > address too. > > The only thing it appears that might help you in this configuration is > graylisting. I wouldn't go there though. Get QMT on the perimeter. > > -- > -Eric 'shubes' > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
