> From: Arvid Ephraim Picciani <[EMAIL PROTECTED]> > Organization: IB C SOLUTIONS LTD > Date: Mon, 17 Mar 2008 21:43:27 +0100 > To: <users@spamassassin.apache.org> > Subject: ways to react faster to spam attacks > > greetings. > most of the spam we get (like 90%) is the usual internet noise. sa filters > them perfectly with 10 to 20 points. > Unfortunatly from time to time there are waves of very prefessional spam. > I wonder how you react on those. Do you quickly hack up an sa rule to filter > by specific words? Do you have a central repo for rules? > --
I don't know if anyone has mentioned it yet, but you might want to make sure you have razor and DCC running. Both are good at catching new spams as they begin to move around the world. In fact, can react a lot faster than you can in setting up custom keywords. One more thing, the commercial DCC reputation scores give a percentage of 'bulk' for every ip that connects to your system (you need the commercial DCC server and Mark Martinec's patches to DCC.pm so SA can see the scores). > best regards/Mit freundlichen Grüßen > Arvid Ephraim Picciani > _________________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(tm). For Information please see http://www.spammertrap.com _________________________________________________________________________
