Cedric Knight wrote:
(1) Report to SpamCop and DCC/Pyzor.
ditto, and better, since we use the commercial version of DCC, it also
include a reputation score.
DCC reputation score is really nice, since if the ip address does lots
of spamming, you get a hit on it even if 'this' zero day spam doesn't.
sa reporting with DCC reputation code adds (n++) to the score.
example, your server ip:
http://www.rhyolite.com/cgi-bin/reps.cgi?tgt=217.72.179.5
pretty good reputation, only 29% of the email originating is considered
'bulk'
(DCC hint: bulk is not spam!), second DCC hint: make sure you whitelist
your own ip's so you don't get a 'bulk' score!
anything over 20% takes 30 days to clear out.
also, have REAL spamcop reporting address in local.cf
In short, I think more anti-spam activists are needed.
been there, done that, got the tee shirts. have had spammers come into
my office with weapons in the past because I got them cancelled.
Still have a bunch of 'scheidell is a nazi' web pages up complaining
about be going all the way back to '94 (thats 1994 to all of your pre
y2k people :-)
CK
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
_________________________________________________________________________
