Thanks Ken, Yes, also have Spamassassin. Problem is the other day a lot of spam where getting through and queued messages reach as high as 20K on our server. Normally, queued messages on our server averages 100 and below. We also do have the auto-update of rules in spamassassin, getting updates every other day from rulesemporium.com. Please see attached local.cf config on our server.
Thanks again, On 12/18/06, Kenneth P. Oncinian <[EMAIL PROTECTED]> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Josel, How much is "a lot"? Because imho, spam these days are becoming smarter and smarter. In my simple spamassassin setup which is just using auto-update sare rules, approximately 15K to 20K of spam mails are already being dropped on a monthly basis, although imho it's already a decent number, but still a lot of spam are getting through (using the animated gif technique). My point here is, you have to first monitor your anti-spam solution to have an idea on the ratio of it's effectiveness. And also, you are using postix's native anti-UCE technique, are you also using 3rd party solution like spamassassin or dspam? hth, Kenneth - -- PGP Public Key: http://m.1asphost.com/koncinian/koncinian.gnupg.key Josel Joaquin wrote: > > Kindly see below the Anti-UCE config in my Postfix main.cf > <http://main.cf> config settings, it is blocking some emails but > unfortunately lots of spam are getting through. Is there a way to make > it more effective? Thanks. > > smtpd_sender_restrictions = > check_sender_access hash:/etc/postfix/access, > permit_mynetworks, > reject_rhsbl_sender rhsbl.sorbs.net <http://rhsbl.sorbs.net>, > reject_rhsbl_sender sbl-xbl.spamhaus.org > <http://sbl-xbl.spamhaus.org>, > reject_rhsbl_sender blackhole.securitysage.com > <http://blackhole.securitysage.com>, > reject_maps_rbl > reject_non_fqdn_sender, > reject_unknown_sender_domain, > reject_rhsbl_sender dsn.rfc-ignorant.org > <http://dsn.rfc-ignorant.org>, > permit > smtpd_recipient_restrictions = > reject_unlisted_recipient > check_client_access hash:/etc/postfix/access > permit_mynetworks > permit_mx_backup > reject_rhsbl_client block.blars.org <http://block.blars.org>, > reject_rhsbl_sender blackhole.securitysage.com > <http://blackhole.securitysage.com>, > reject_maps_rbl > reject_unauth_destination > check_sender_access hash:/etc/postfix/sender_access > check_policy_service unix:private/policy > > > ------------------------------------------------------------------------ > > _________________________________________________ > Philippine Linux Users' Group (PLUG) Mailing List > [email protected] (#PLUG @ irc.free.net.ph) > Read the Guidelines: http://linux.org.ph/lists > Searchable Archives: http://archives.free.net.ph -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFheTT9MTaiXoaMBgRAmzaAJ9c3QVFSyHfx18IYtwGstNVUkh/DACbBuIU J7FrzSgLjhKK8ODPyZrKyyk= =ME4v -----END PGP SIGNATURE----- _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
# required_hits 2.5 rewrite_subject 1 rewrite_header Subject "THIS IS SPAM!" report_safe 1 use_terse_report 1 subject_tag *****SPAM***** use_auto_whitelist 0 auto_learn 1 skip_rbl_checks 0 #use_razor2 0 #razor_timeout 5 #razor_config /var/vscan/.razor/razor-agent.conf #use_bayes 0 #bayes_auto_learn 1 #bayes_auto_learn_threshold_nonspam 1 #bayes_auto_learn_threshold_spam 14 #bayes_path /var/vscan/.spamassassin/bayes #auto_whitelist_path /var/vscan/.spamassassin/auto_whitelist #use_dcc 0 #dcc_home /var/dcc #dcc_dccifd_path /var/run/dcc/dccifd.pid #dcc_dccifd_path /var/dcc/dccifd #$dcc_add_header 1 #use_pyzor 1 #pyzor_timeout 5 #pyzor_path /usr/bin/pyzor #pyzor_add_header 1
_________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
