I've been doing some more digging since my last post, and have
figured out that the spam is not being blocked by pf, as I suspected
(since it wasn't showing up in my spam folder), but by spamassassin
blacklists.
The smtp log file has lots of entries like:
2008-01-14 09:30:37.074087500 rblsmtpd: 123.20.89.67 pid 72121: 451
http://www.spamhaus.org/query/bl?ip=123.20.89.67
2008-01-14 09:31:05.271514500 rblsmtpd: 58.227.241.97 pid 72122: 451
Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?
58.227.241.97
2008-01-14 09:31:17.404943500 rblsmtpd: 41.196.155.56 pid 72123: 451
http://www.spamhaus.org/query/bl?ip=41.196.155.56
2008-01-14 09:31:18.304682500 rblsmtpd: 123.20.89.67 pid 72124: 451
http://www.spamhaus.org/query/bl?ip=123.20.89.67
So raises the same point that Oliver makes: how trustworthy are these
blacklists?
-- John
On Jan 14, 2008, at 9:37 PM, Olivier Nicole wrote:
I know this is an odd thing to worry about, but is this normal? Since
the spam doesn't even seem to be reaching spamd, I'm guessing that
the real hero is pf, which must be blocking 99.99% of spam at the
packet level.
I don't know how you configured pf, but since I use the black list
fromhttp://www.sa-blacklist.stearns.org/sa-blacklist/sa-
blacklist.current.sendmail-access,
I reduced drastically the spam that reaches SpamAssassin.
The key point with such black list is that you must trust the list, as
there is no place for false positive.
Bests,
Olivier
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-
[EMAIL PROTECTED]"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Websites for On-line Collectible Dealers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Identry, LLC
John Almberg
(631) 546-5079
[EMAIL PROTECTED]
www.identry.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
