Fritz Borgstedt wrote:
> Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
> <[email protected]> schreibt:
>> Nearly 17% of the spam I see is to addresses that have never or will
>> never
>> be valid on my system. As a result of this I have a relatively large
>> SpamTrapAdddresses.txt file- I have a script file to show me new
>> addresses
>> that the MTA rejects but aren't in the SpamTrapAddresses file. I've
>> started
>> to get dictionary based spam that starts with a | (pipe) symbol. Will
>> adding
>> these to the file break any versions of ASSP?
>
> Why are you doing that? That is quiet unwise.
>
> It is sufficient, to have the mail rejected because of unknown user
> and use *some* as collect addresses . Collect Adresses is better here,
> because you want to collect some content, "unknown user" and
> trap-addresses do not store anything.
>
I was also using a large spamtrapaddress file, but changed it to be a
collectaddress file as you recommended. But I don't see how that makes any
difference. The messages are now rejected as invalid users and nothing is
collected:
Aug-15-07 12:04:39 [PBextreme][monitoring] 82.43.74.57 <[EMAIL PROTECTED]>
PBextreme:monitoring
82.43.74.0 score:600
Aug-15-07 12:04:39 [PBextreme][monitoring] 82.43.74.57 <[EMAIL PROTECTED]>
invalid address
rejected: [EMAIL PROTECTED]
Aug-15-07 12:04:39 [PBextreme][monitoring] 82.43.74.57 <[EMAIL PROTECTED]>
Message-Score: 0+20
(InvalidAddress)
chewtoy.comkevin is in the file.
Dave
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
