Jason Frisvold schrieb:
Greetings,
I'm seeing incoming spam at a rate of 2-3 a minute per user and I'm
having trouble properly identifying these as spam with spamassassin.
Or, alternatively, blocking them.
Does anyone have any idea how I can trigger on these and block them?
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 25527 invoked by uid 89); 11 May 2007 22:24:10 -0000
Received: by simscan 1.2.0 ppid: 25000, pid: 25501, t: 1.7225s
scanners: clamav: 0.90/m:42 spam: 3.1.7
I am not sure if the botnet plugin would catch these, but are you using
the botnet plugin at all and sare-rules (www.rulesemporium.com).
this 2 do a great job here,
along with some helo-checks at mta Level and dial-up blacklists
...
dcc, razor, pyzor?
Thanks,
hth
MH
