On Fri, Oct 23, 2009 at 8:06 AM, Evgeny Yurchenko <evg.yu...@rogers.com> wrote:
> Lyle Giese wrote:
>>
>> Peter Roosenboom wrote:
>>
>>>
>>> hello,
>>>
>>> On pfsense board I cannnot find out whether spamd is working on pfsense
>>> 1.2.3 or not.
>>> Most messages on this topic suggest that it is not working.
>>> I would like to install it, but is it worth the trouble trying? Maybe
>>> special hacks are needed to make it work?
>>>
>>> Please help me to get rid of all this messages suggesting that I might
>>> need viagra.
>>>
>>> Peter
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: support-unsubscr...@pfsense.com
>>> For additional commands, e-mail: support-h...@pfsense.com
>>>
>>> Commercial support available - https://portal.pfsense.org
>>>
>>>
>>
>> spamd is a program to scan email looking for spam.  what part of pfsense
>> handles email messages?  pfsense is a firewall.  It deals in packets of
>> data, not email messages.  You need to use spamd with your email client
>> or MTA, not pfsense.
>>
>> Lyle Giese
>> LCR Computer Services, Inc.
>>
>
> pfSense does have spamd and it behaves in completely different way than
> spamd you use with your mta.
> From package description: "Tarpits like spamd are fake SMTP servers, which
> accept connections but don't deliver mail. Instead, they keep the
> connections open and reply very slowly. If the peer is patient enough to
> actually complete the SMTP dialogue (which will take ten minutes or more),
> the tarpit returns a 'temporary error' code (4xx), which indicates that the
> mail could not be delivered successfully and that the sender should keep the
> mail in their queue and retry again later."
> Very effective if you are not afraid to loose any legitimate e-mail without
> being able to restore it from spam.

To be very clear, the spamd package for pfSense performs grey and
blacklisting as well as tarpitting.  If the sending MTA comes back
_after_ whatever the greylist time is, it'll be passed through to your
MTA, if it comes back while it's still greylisted, it will be
tarpitted.  Read http://www.benzedrine.cx/relaydb.html for a good
description on how this all works.  FWIW, on my inbox it was about 90%
effective (although I no longer have the graphs to show it) - however
I personally stopped using it as I was tired of the delay in mails
from sources that have never sent mail to me (standard issue with the
greylist technique).

--Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org

Reply via email to