Go to this page and look for "scam.sh" http://it.dennyhalim.com/2009/02/postfix-postgrey-clamsmtp-sanesecurity.html
the scam.sh does a great job of getting new rules and some really good ones. I don't get much spam and not too many false positives, either. --C On 3/24/2010 9:27 PM, Kristian Hoffmann wrote: > Where do you get SA rules from? We were using SARE, but they don't > appear to be maintained anymore. > > Thanks, > > -Kristian > > On Wed, 2010-03-24 at 18:50 -0400, Justin Wilson wrote: > >> The big thing about any spam solution is the ability to ³learn². >> Everynight we have SpamAssassin go out and download new rules from a couple >> of different sites. Between this and the Amavis updates it keeps on top of >> things quite well. Plus we also have greylisting on the higher hit servers >> as well as IP blacklists of known spammers. Most of these are APNIC ips. >> What many people fail to do is make sure their secondary MX is just as good >> as filtering spam as the primary is. Another tactic is to have a Mikrotik >> with some rules that say if you receive X amount of connections from a >> single IP to your mail server(s) block that IP for X amount of minutes. >> >> Justin >> -- >> Justin Wilson<[email protected]> >> http://www.mtin.net >> http://www.metrospan.net >> >> >> >> From: Chuck Hogg<[email protected]> >> Reply-To: WISPA General List<[email protected]> >> Date: Wed, 24 Mar 2010 18:36:39 -0400 >> To: WISPA General List<[email protected]> >> Subject: Re: [WISPA] [Motorola II] OT: Barracuda Updates? >> >> I'm using it on a few domains...and before I push it to the enterprise >> level, I just wanted to see how many others are using it. I know that >> Barracuda servers are essentially SpamAssasin, amavis/clamAV, with a new >> frontend and modifications to make it the more enterprise class server. >> >> Regards, >> Chuck Hogg >> Shelby Broadband >> 502-722-9292 >> [email protected] >> http://www.shelbybb.com >> >> >> -----Original Message----- >> From: [email protected] [mailto:[email protected]] On >> Behalf Of Justin Wilson >> Sent: Wednesday, March 24, 2010 4:53 PM >> To: WISPA General List >> Subject: Re: [WISPA] [Motorola II] OT: Barracuda Updates? >> >> Chuck turned me on to PurpleHat a month of so ago. We are in the >> process >> of testing it on some domains. Most of the packages within it are ones >> that >> continually get updated. >> >> This might help: >> http://www.purplehat.org/?page_id=4 >> >> BTW: We are running it in a Virtual Machine and so far so good. >> > > > -------------------------------------------------------------------------------- > WISPA Wants You! Join today! > http://signup.wispa.org/ > -------------------------------------------------------------------------------- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: [email protected] Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
