Re: FreeBSD SPAM
On Fri, 3 Oct 2003, Joseph Koenig wrote: I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. These have been very effective for me: sbl.spamhaus.org list.dsbl.org blackholes.easynet.nl dynablock.easynet.nl dnsbl.sorbs.net Naturally, you should check the web pages for each before using them to make sure you understand their listing policies. Commercial DNSBL... no experience there. Some are quite conservative, and some are toothless. The free ones seem better to me. In combination with DNSBL, I have a large /etc/mail/access file of rejects. Bad ISPs, rogue providers, and even much of some countries. Bandwidth-wise, it's hard to beat--mail from known-bad origins is rejected outright. The Windows virus-of-the-week attacks have become so common that I've also written a little script to add those by /24. I'll manually expire them by removing that section from the access file, whenever it seems like it's rejecting real mail. Actually, I haven't seen that yet. -Warren Block * Rapid City, South Dakota USA ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
Robert Huff wrote: Roger 'Rocky' Vetterberg writes: SpamAssissin can hog a lot of CPU if you handle a lot of emails, so make sure you are running it in daemon mode, that helps quite a bit. SpamAssassin is Perl, so of ourse it's a hog. I seem to remember someone trying to write a version in C Well, they'll still be trying in 2007... BNy the time you've written the current SA in C, the current Perl version will be miles ahead. Programmer productivity is always more important than raw power. A 2.8MHz Pentium Xeon with 2Gb RAM doesn't cost all that much and offers phenomenal processing power. If that's not an option, an effective method for reducing SA load is to feed it less email :) I use Postfix and have some pretty extensive correlation checks to filter out spam (spoofed sender domains, garbage HELO strings, obsolete or spambait recipients, spammer hosts). Since the beginning of the month these low-overhad checks blocked 5313 messages of 19990 total. That's 5300 less that have to be dealt with SA. To learn more about blocking spam with Postfix, http://www.securitysage.com/guides/postfix_uce.html is a good place to start these days. David ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
Joseph Koenig wrote: I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any advice, Joe We are running procmail, MIMEDefang and SpamAssassin. After some tweaking, it kills about 9 out of 10 spams. SpamAssissin can hog a lot of CPU if you handle a lot of emails, so make sure you are running it in daemon mode, that helps quite a bit. -- R ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
Roger 'Rocky' Vetterberg writes: SpamAssissin can hog a lot of CPU if you handle a lot of emails, so make sure you are running it in daemon mode, that helps quite a bit. SpamAssassin is Perl, so of ourse it's a hog. I seem to remember someone trying to write a version in C Robert Huff ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
Sean Page wrote: Granted it's not an inexpensive solution, but we switched from SpamAssassin to PureMessage by ActiveState. http://www.activestate.com/Products/PureMessage We are thoroughly impressed with the accuracy and the dynamic feature set of the product. Automatic updates come down at least a couple of times a week to keep up with the latest tactics, and the support is second to none. Just my $.02 worth Sean. -Original Message- From: Kliment Andreev [mailto:[EMAIL PROTECTED] Sent: October 3, 2003 9:23 AM To: [EMAIL PROTECTED] Subject: Re: FreeBSD SPAM I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any Check www.kaspersky.com for anti-virus and anti-spam tools for FreeBSD. If you decide to use SpamAssassin and if you have a lot of spam-mail coming and a slow server, mind that it will clog you CPU very, very soon. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] blocking dynamic ip and dialup users with dnsbl lists reduces 60-70% of the spam. there is a very good one on an .nl server. for some special ones an access list helps. adding a combination of mailscanner and spamassassin to sendmail does the rest. the rest which comes thru is not really a lot of mails. and all of that stuff is open source and free. happyly running above things with 50k+ mails / day. -- Best regards / Mit freundlichen Gruessen, Karl M. Joch http://www.freebsd.at - Das Power Betriebssystem ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
only my $ 0,02 about on SpamAssassin usage try catching SpamAssassin directly from command line of perl doing this: perl -MCAPN -e'install MAil::SpamAssassin' this will download Spamassassin and the dependencys , compile test and install. Is just and advice, about how take better performance of your Perl system because some server systems don't need to have the ports collection installed. and using this procedure you could download 99% of the Perl packages. be the force with you young Jedi's. 8-) -- Thanks Regards Luís Vitório Cargnini Computer Science Bacharelor PUC-RS Pontifícia Universidade Católica - Rio Grande do Sul Brasil pgp0.pgp Description: PGP signature
Re: FreeBSD SPAM
Joseph Koenig wrote: I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any advice, Joe ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] How about spamassassin ? (/usr/ports/mail/p5-Mail-SpamAssassin) It works great here and catches about 95% of the spam hitting us. Rob Evers ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
On Fri, 3 Oct 2003, Joseph Koenig wrote: I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any advice, Try SpamAssassin (mail/p5-Mail-SpamAssassin). I use it in many of the servers I administer and it works great. it has Bayesian filters, so it can learn to tell spam from ham. I don't use any ORBL directly, since for me they're more trouble than they're worth, but I use them to bump the spamassassin score. SpamAssassin also integrates very nicely with MIMEDefang to stop malware sent via email. Hope this helps Fer Joe ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: FreeBSD SPAM
Joseph: We use a combination of a number of DNSBLs and MIMEDefang/SpamAssassin, which between them detect on average 66% of inbound mail as spam/virus, a small amount of other spam gets through undetected, but it's very little. MIMEDefang is a great solution that you can customize to suit your environment, assuming you use sendmail and know a little perl. - Barry -- Barry Byrne, IT Manager, WBT Systems, Block 2, Harcourt Centre Harcourt Street, Dublin 2, Ireland I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any advice, Joe ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
On Fri, 3 Oct 2003 11:42:11 -0300 (ART) Fernando Gleiser [EMAIL PROTECTED] wrote: On Fri, 3 Oct 2003, Joseph Koenig wrote: I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any advice, You might want to consider investigating a hardware appliance. Two that come to mind is Borderware MailXtreme and Bluecat Networks Meridius. re, - Matthew Bettinger System Administrator Champion Elevators, Inc Houston, Texas 77061 713.640.8500 - KeyID: 68F0AAC4 Key Fingerprint: 096F 98AE 74FB 984B 2134 5C41 0E94 CF91 68F0 AAC4 Public Key: http://www.championelevators.com/~mbettinger/pub_key.asc ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD SPAM
I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any Check www.kaspersky.com for anti-virus and anti-spam tools for FreeBSD. If you decide to use SpamAssassin and if you have a lot of spam-mail coming and a slow server, mind that it will clog you CPU very, very soon. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: FreeBSD SPAM
Granted it's not an inexpensive solution, but we switched from SpamAssassin to PureMessage by ActiveState. http://www.activestate.com/Products/PureMessage We are thoroughly impressed with the accuracy and the dynamic feature set of the product. Automatic updates come down at least a couple of times a week to keep up with the latest tactics, and the support is second to none. Just my $.02 worth Sean. -Original Message- From: Kliment Andreev [mailto:[EMAIL PROTECTED] Sent: October 3, 2003 9:23 AM To: [EMAIL PROTECTED] Subject: Re: FreeBSD SPAM I know this is an issue that comes up a lot, but I wanted to get an opinion from some people on the list. We, along with everyone else, have TONS of SPAM hit our server. Unfortunately, we haven't found any good way to reduce it. We're using ORDB and SpamCop, but neither are really doing the job. We're a small small company (7 employees) with about 100 mailboxes on the server. We don't mind paying for a service that works, but we are certainly on a tight budget. Any recommendations would be greatly appreciated. Currently, we're using Sendmail, although we're considering (and testing) a switch to PostFix. TIA for any Check www.kaspersky.com for anti-virus and anti-spam tools for FreeBSD. If you decide to use SpamAssassin and if you have a lot of spam-mail coming and a slow server, mind that it will clog you CPU very, very soon. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
