The RBLS I use:

dialups.relays.osirusoft.com "Please see <http://relays.osirusoft.com/>."
spamhaus.relays.osirusoft.com "Please see <http://www.spamhaus.org/>."

In the past few months, the only blocked email complaint is from 
starband.com getting TempBanned.  I've had to add a few mail servers 
of competing ISPs in my area to my host lists to keep them from 
getting tempbanned as well.  Users like to send email to everyone in 
their address book, even to the old, out of date emails.  This causes 
other ISP's mail servers to get TempBanned.  (I suppose a strange 
type of DoS attack could be launched by sending lots of bogus emails, 
causing one's SMTP server to get TempBanned by another SMTP server)
I've recently deleted all my spamtrap aliases (but I retained them in 
a backup file, in case Stalker ever beefs up the spamtrap feature , 
to more effectively allow the TempBanned feature to work better.  It 
seems that the large number of old email accounts on my SIMS server 
really benefits me in this regard.  Lots of "rejected: user unknown" 
helps get hosts on the TempBanned.

I've also removed my secondary email server from the mix.  Only one 
MX entry for my domain now......but if my mailserver goes down, 
inbound email being held up on other mail servers is the LAST of my 
worries.   <g>  I don't know why I didn't think of this before. 
Thank you Bill Cole for validating my ideas.

Much more spam is now blocked.  Thousands upon thousands of rejections per day.

However, in doing a filter for "spam?" and watching a web browser run 
live on my  desktop as I sit at my desk, I've noticed a few things.

First and foremost, I've noticed that I have to scroll it several 
times per minute.  That is a sad statement on the current state of 
the internet.  Other than that, I've noticed most all spam email is 
delivered individually.  Usually, this is because of the shotgun 
approach.  Spammer:  "We take every username we've seen, make it 
@yourdomain.com, and fire up the sending engine..."

Spammer boxen hit my server very slowly...  I think they realize that 
they'll get TempBanned by some MTAs if they try and hit a large 
number of usernames at once, so they hit a few usernames each minute, 
for days at a time.  Or, they do what flowgo.com does...... who 
*STILL* looks an awful lot like a spammer.... they get 250 outbound 
SMTP boxes, and send an email from each of them.  Basically, my SIMS 
box always has an SMTP connection from some-smtp-host.flowgo.com.

In comparing my log files of the past few days with log files of a 
week ago, I'm seeing over a 100% increase in blocked spams.  Sadly, 
the volume that hits my inboxes doesn't seem to change.  I guess 
blocking 2% of email as spam rather than 1% doesn't have too large an 
effect, when 50% of the email that flows into my server is spam.

</spam rant>

Does anyone know if I can ResEdit the knobs for the TempBanned feature?

-Jerry

-- 

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to