On Fri, Oct 23, 2009 at 8:06 AM, Evgeny Yurchenko <evg.yu...@rogers.com> wrote: > Lyle Giese wrote: >> >> Peter Roosenboom wrote: >> >>> >>> hello, >>> >>> On pfsense board I cannnot find out whether spamd is working on pfsense >>> 1.2.3 or not. >>> Most messages on this topic suggest that it is not working. >>> I would like to install it, but is it worth the trouble trying? Maybe >>> special hacks are needed to make it work? >>> >>> Please help me to get rid of all this messages suggesting that I might >>> need viagra. >>> >>> Peter >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: support-unsubscr...@pfsense.com >>> For additional commands, e-mail: support-h...@pfsense.com >>> >>> Commercial support available - https://portal.pfsense.org >>> >>> >> >> spamd is a program to scan email looking for spam. what part of pfsense >> handles email messages? pfsense is a firewall. It deals in packets of >> data, not email messages. You need to use spamd with your email client >> or MTA, not pfsense. >> >> Lyle Giese >> LCR Computer Services, Inc. >> > > pfSense does have spamd and it behaves in completely different way than > spamd you use with your mta. > From package description: "Tarpits like spamd are fake SMTP servers, which > accept connections but don't deliver mail. Instead, they keep the > connections open and reply very slowly. If the peer is patient enough to > actually complete the SMTP dialogue (which will take ten minutes or more), > the tarpit returns a 'temporary error' code (4xx), which indicates that the > mail could not be delivered successfully and that the sender should keep the > mail in their queue and retry again later." > Very effective if you are not afraid to loose any legitimate e-mail without > being able to restore it from spam.
To be very clear, the spamd package for pfSense performs grey and blacklisting as well as tarpitting. If the sending MTA comes back _after_ whatever the greylist time is, it'll be passed through to your MTA, if it comes back while it's still greylisted, it will be tarpitted. Read http://www.benzedrine.cx/relaydb.html for a good description on how this all works. FWIW, on my inbox it was about 90% effective (although I no longer have the graphs to show it) - however I personally stopped using it as I was tired of the delay in mails from sources that have never sent mail to me (standard issue with the greylist technique). --Bill --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org