Scot,

You really need to get QMT on the perimeter so spamdyke can do its thing. This will give you the biggest bang for your buck. Plus, there's nothing else nearly as effective. I've said for quite some time that if I had to pick just one anti-spam software, it'd be spamdyke hands down. There's just nothing else that compares (even spamassassin).

--
-Eric 'shubes'

On 03/11/2014 08:56 PM, Scot Needy wrote:
New dilemma in my fight against SPAM.

I updated the simcontrol file to include additional attachments and shortly all 
mail was blocked but I’m not sure why

What exactly is the function of spam_hits ? Block ALL mail after 12 hits ? Per 
hour per … ?
Is simcontrol even in play anymore ?

03-11 18:05:44 policy_check: policy allows transmission
03-11 18:05:45 
simscan:[2167]:ATTACH:0.5788s:msg.1394575545.33060.2168:10.189.254.17:….
03-11 18:05:45 qmail-smtpd: qq hard reject (Your email was rejected because it 
contains a bad attachment: msg.1394575545.33060.2168): MAILFROM:
03-11 18:05:45 spamdyke[2166]: DENIED_OTHER from:…………………………...: 
554_Your_email_was_rejected_because_it_contains_a_bad_attachment:_msg.1394575545.33060.2168
03-11 18:05:45 tcpserver: end 2166 status 0



  qq hard reject (Your email was rejected because it contains a bad attachment: 
addr.1394576063.667266.2282)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
addr.1394583394.337275.4588)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
addr.1394583630.231858.4647)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
msg.1394575545.33060.2168)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
msg.1394581657.995523.4160)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
msg.1394583827.844655.4665)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
textfile0)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
textfile2)
  qq hard reject (Your email was rejected because it contains a bad attachment: 
textfile4)



:clam=yes,spam=yes,spam_hits=5,attach=.ade:.adp:.app:.asd:.asf:.asp:.asx:.avi:.bas:.bat:.bin:.chm:.cil:.cla:.class:.cmd:.com:.cpl:.crt:.csh:.css:.dll:.dot:.email:.eml:.exe:.fxp:.hlp:.hta:.htm:.html:.inf:.ins:.isp:.js:.jse:.ksh:.lnk:.mda:.mdb:.mde:.mdt:.mdw:.mdz:.mov:.mp3:.mpe:.mpeg:.mpg:.msc:.msi:.msp:.mst:.nws:.ocx:.ops:.pcd:.pif:.pl:.pm:.pot:.pps:.prf:.prg:.ps:.rar:.reg:.scf:.scr:.sct:.shb:.shm:.shs:.url:.vb:.vbe:.vbs:.vxd:.wav:.wmd:.wmf:.wms:.wmz:.wsc:.wsf:.wsh:.wsz:.xsl:.xlt:.xlw:

Back to original and restarted

:clam=yes,spam=yes,spam_hits=12,attach=.exe:.pif:.src




On Mar 11, 2014, at 3:09 PM, Eric Shubert <[email protected]> wrote:

On 03/11/2014 12:04 PM, Eric Shubert wrote:
Yes, blacklists will still help, but not this way. Specify them in the
spamdyke.conf file. When spamdyke is installed, the control/blacklists
file is not used (it's used by rblsmtpd, which is disabled when spamdyke
is installed).

Wrong. Sorry, I wasn't thinking. These rely on the sending server's IP address 
too.

The only thing it appears that might help you in this configuration is 
graylisting. I wouldn't go there though. Get QMT on the perimeter.

--
-Eric 'shubes'


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]






---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to