RE: [vps-mail] Dramatic increase of SPAM during last days

["Martin Fischer" <martin.fischer@xxxxxxxxxxxxx>]

Bennett,

thank you. We are using DNS blacklists in the sendmail.cf (sbl.spamhaus.org & relays.ordb.org) and other BLs with SA, 
(we can't use all dial-in BL's because in Europe ADSL/cable/xDSL subscribers IP is a dynamic IP listed in most of the BL's.) 
 


From: owner-vps-mail@xxxxxxxxxxxx [mailto:owner-vps-mail@xxxxxxxxxxxx] On Behalf Of Ben Lanford
Sent: Wednesday, May 26, 2004 5:37 PM
To: vps-mail@xxxxxxxxxxxx
Subject: Re: [vps-mail] Dramatic increase of SPAM during last days

Martin Fischer <martin.fischer@xxxxxxxxxxxxx> said: 
 
> Hi,  
>  
> we noticed a dramatic increase of SPAM during last days but we did not 
change filters (SA 2.63)? Any hints welcome! 
 
If you have the luxury of being able to filter all incoming mail (i.e., for 
all users), I have found using DNS blacklists in the sendmail.cf file 
eliminates a great deal of incoming SPAM during sendmail's SMTP 
conversation--before it makes it onto the server to be processed by 
SpamAssassin or Procmail. 
 
The hard part is choosing which of the numerous blacklists is right for you. 
 
Within the past day or two someone recommended SpamCop. Using their blacklist 
can be as simple as adding the following line to your sendmail macro 
configuration file: 
 
FEATURE(`dnsbl', `bl.spamcop.net')dnl 
 
I'm sure others on this list have their own favorites. 
 
After you implement DNSBLs, monitor your mail log closely (searching for the 
string "check_" to make sure the blacklist's definition of spam isn't more 
agressive than yours). 
 
You can read more about DNSBLs in the Bat Book (3rd ed., pp. 295-98), as well 
as in the cf/README (/usr/share/sendmail/cf/README on VPS2; on VPS1, after 
vinstalling sendmail, see ~/usr/local/sendmail/cf/README). I see that one 
subscriber to this list (I think) wrote a page on DNSBLs at http://
www.technoids.org/dnsbl.html 
 
--  
Bennett Lanford 
ben@xxxxxxxxxxxxx 
 
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).


======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).