Re: [qmailtoaster] spam blocking questions

2009-05-01 Thread Eric Shubert
Rajesh, I meant an actual spam, not one you create. This does no good. David's on the right track (where I was attempting to go with this). I'll let him carry forward on this. RM-24x7server.net wrote: hi Spam with the mail to and mail from as same email id Using a different email server,

Re: [qmailtoaster] spam blocking questions

2009-05-01 Thread David Milholen
Rajesh, Look very closely at this line in your header.. Received-SPF: fail (ns1.xx.com: SPF record at xx.com *does not designate 208.115.35.224* as permitted sender) This ip is not supposed to be an authorized sender for x.com. Run that ip against the sites I listed. Look at other abusive

Re: [qmailtoaster] spam blocking questions

2009-04-30 Thread RM-24x7server.net
hi Spam with the mail to and mail from as same email id Using a different email server, i email from raj...@xx.com (with different auth credentials) to raj...@xx.com (my mail server where xx.com is hosted) the email came thru with the following headers ### RFC822

Re: [qmailtoaster] spam blocking questions

2009-04-30 Thread DAVID
I would take a closer look at the header and see where the orginating ip is coming from then run it against dns reports or ipcountryblocks.net to see what country it belongs to and check its fraud profile. Ill bet 99% that it is going to register on some level. If you find this to be the case

Re: [qmailtoaster] spam blocking questions

2009-04-28 Thread Jake Vickers
24x7ser...@24x7server.net wrote: hi i have QTP with spamdyke implemented and running on my server i read thru spamdyke configuration details but did not find anything specific that will actually block spam mail with the from and to address as the same but originating from a unknown server. Can

Re: [qmailtoaster] spam blocking questions

2009-04-28 Thread Eric Shubert
Have you received this type of spam since installing spamdyke? If so, please post the headers from an example. Have you modified the spamdyke configuration that qtp-install-spamdyke installed? If not, you might try enabling reject-ip-in-cc-rdns if that's feasible for your use. See spamdyke

Re: [qmailtoaster] spam blocking questions

2009-04-27 Thread Eric Shubert
Simply run the qtp-install-spamdyke script, and spamdyke will be installed for you. Be sure to update to the current QTP before doing so, as an older version of QTP might install an older version of spamdyke, or the older QTP might not contain the qtp-install-spamdyke script at all. See

Re: [qmailtoaster] spam blocking questions

2009-04-27 Thread 24x7server
hi i have QTP with spamdyke implemented and running on my server i read thru spamdyke configuration details but did not find anything specific that will actually block spam mail with the from and to address as the same but originating from a unknown server. Can you point me as to which specific

Re: [qmailtoaster] spam blocking questions

2009-04-26 Thread 24x7server
hi we are indeed using qmailtoaster plus (QTP) but i would like to know which specific configuration of QTP is related to this ? thanks rajesh 24x7ser...@24x7server.net wrote: hi in spamassassin i generally whitelist specific domains whitelist_from_rcvd *...@friendlydomain.com

Re: [qmailtoaster] spam blocking questions

2009-04-23 Thread 24x7server
thanks for your reply spamassassin is such an advanced software i am sure there will be some way out to handle this. i hope somebody suggests a solution because such emails would be a definite spam rajesh On Thursday 23 April 2009 12:58:17 24x7ser...@24x7server.net wrote: 1) I sometimes

Re: [qmailtoaster] spam blocking questions

2009-04-23 Thread Eric Shubert
FWIW, I have a user who does this periodically to save various things, so for me it's not spam. Are you using spamdyke? I'd be surprised if spamdyke didn't catch the emails in question. 24x7ser...@24x7server.net wrote: thanks for your reply spamassassin is such an advanced software i am

Re: [qmailtoaster] spam blocking questions

2009-04-23 Thread Jake Vickers
24x7ser...@24x7server.net wrote: thanks for your reply spamassassin is such an advanced software i am sure there will be some way out to handle this. i hope somebody suggests a solution because such emails would be a definite spam rajesh On Thursday 23 April 2009 12:58:17

Re: [qmailtoaster] spam blocking questions

2009-04-23 Thread 24x7server
hi in spamassassin i generally whitelist specific domains whitelist_from_rcvd *...@friendlydomain.com friendlydomain.com whitelist_from_rcvd *...@friendlydomain.com abc.friendlydomain.com whitelist_from_rcvd *...@friendlydomain.com xyz.friendlydomain.com i know for sure that the emails from

Re: [qmailtoaster] spam blocking questions

2009-04-23 Thread Jake Vickers
24x7ser...@24x7server.net wrote: hi in spamassassin i generally whitelist specific domains whitelist_from_rcvd *...@friendlydomain.com friendlydomain.com whitelist_from_rcvd *...@friendlydomain.com abc.friendlydomain.com whitelist_from_rcvd *...@friendlydomain.com xyz.friendlydomain.com i

Re: [qmailtoaster] spam blocking questions

2009-04-23 Thread Eric Shubert
24x7ser...@24x7server.net wrote: hi in spamassassin i generally whitelist specific domains whitelist_from_rcvd *...@friendlydomain.com friendlydomain.com whitelist_from_rcvd *...@friendlydomain.com abc.friendlydomain.com whitelist_from_rcvd *...@friendlydomain.com xyz.friendlydomain.com i

[qmailtoaster] spam blocking questions

2009-04-22 Thread 24x7server
hi this is more related to spamassassin. 1) I sometimes receive spam mail with both the mail from and the mail to as the same email id. I need a spamassassin rule to block such emails if the same does not originate from my server. So basically i need to check if header mail from and mail to are

Re: [qmailtoaster] spam blocking questions

2009-04-22 Thread Adi Nugroho
On Thursday 23 April 2009 12:58:17 24x7ser...@24x7server.net wrote: 1) I sometimes receive spam mail with both the mail from and the mail to as the same email id. I need a spamassassin rule to block such emails 2) a spamassassin rule to compare the mail from and envelope sender (reply-to) and