Thought I might share this with People....

The GreyLister  is just Brilliant...
Spam rejection has improved from 96%(Spamassassin only) to 99.2%
(Spamassassin+Policyd)
and I am after some more % rejection....
**AND*** I am not using any RBL services.... (Except
Spamassassin)         :)

However my triplet numbers are quite HIGH...

This is a soulution to 'Cleaning the Triplet table' of known SUPERSPAMS
   (ie Emails That "got thru" and Spamassassin has 'munged')

Caveat -- It does depend on the POSTFIX/SPAMASSASSIN SETUP used...

1) All Customers email first GreyListed
2) Fed to SPAMASSASSIN (which munges the superspam email with the
Spamassasin report)
3) Fed to PostFix   (Postfix 'header_checks' REDIRECTS the SuperSpam to
/var/spool/spampool)
4) Fed to Procmail  (I have other applications also use procmail for
driving Data collection front ends)

If you are Interested Read on.................

Basically I have a ".procmailrc" script in the spampool directory that
creates
  a text file with many lines like this --- every time a SUPERSPAM comes
in!

<snip>
DELETE QUICK FROM triplet WHERE _host='219.250.73' AND
_from='[EMAIL PROTECTED]' AND _rcpt='[EMAIL PROTECTED]' ;
<snip>

Then a cron job which runs every 15 minutes.... does the mysql above and
then resets the text file to zero length...
  this keeps the SUPER SPAMS well and truly Grey Listed....

I am also thinking of developing this using 'cron' to modify IPTABLES on
persistant 'pest' Spam ZOMBIES
with 'DROP'      and  'TARPIT'  :)

If anyones wants the scripts and setup Info....
  I am willing to share it...

DonMath




-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users

Reply via email to