> Hi Jared,,
>
>
>
> Thanks you so much for the clear information .:-)
>
>
>
> Okai I now Im just using --- "-r sbl-xbl.spamhaus.org -r
> bl.spamcop.net
> alone.
>
>
>
> Only problem is with Blacklisting of my Gateway IP [Public IP] due to
> which My LAN users [Private Ips Nated ] will not be able to send mails.
>
>
>
> Everytime my IP blocked I put a request to unblock it . But now its
> happening frequently.
>
>
>
> This happens due to virus attack in LAN and those viruses start sending
> emails out from Private LAN - Nated to using gateway IP to Internet .
>
>
>
> Pls Suggest me a way to fix this .
>
>
>
> Thanks & Regards
>
> ashok
>
>
>
> _____
>
> From: Jared Markell [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 11, 2006 9:18 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: RE: [qmailtoaster] Spamassassin how-to improve spam catch
>
>
>
> Well, the real solution would be for you to get your IP unblocked.
>
>
>
> And about the blacklists you put in your blacklists file, just a note to
> keep in mind, that for each of the addresses you add to that list, is
> another lookup the toaster has to check against before allowing the email
> into your system. If you have 10 addresses in your blacklists file, that's
> 10 lookups your server has to do for every email inbound. On medium to
> high
> volume servers, this can drastically clog your server to a very poor
> condition where incoming emails will get bounced just because the server
> has
> too many emails waiting to come in. Just something to keep in mind..
>
>
>
> Is the line below the actual contents of your blacklist?
>
> "-r sbl-xbl.spamhaus.org -r bl.spamcop.net -r bl.csma.biz -r
> spamsources.fabel.dk -r dnsbl.njabl.org -r relays.ordb.org -r d"
>
>
>
> If so, you need to remove the last "-r d". That is a bad typo. Heck,
> removing this could solve your problems all together.
>
>
>
> Taking into what I said before about having too many files in the
> blacklists
> file; The way I solved my spam issues was to use just the spamcop BL
> lookup,
> but also use Rules Du Jour spam assassin rules. Also, I lowered my spam
> ratings to 4 and 8. (4 to get marked as SPAM, 8 to get deleted). The
> default
> is 5 and 12. I think those are too lenient.
>
>
>
> Jared
>
>
>
> _____
>
> From: ashok [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 11, 2006 8:36 AM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: RE: [qmailtoaster] Spamassassin how-to improve spam catch
>
> Hello Frnds,,
>
>
>
> Even I was facing problem with SPAM .. which I use to get like Viagra ,
> necklace watches , antrim etc..
>
>
>
> And I enabled
>
>
>
> -r sbl-xbl.spamhaus.org -r bl.spamcop.net -r bl.csma.biz -r
> spamsources.fabel.dk -r dnsbl.njabl.org -r relays.ordb.org -r d
>
>
> Now the problem I faced is .
>
>
>
> My gateway IP address got Blacklisted ..when I check in
> <http://www.dnsstuff.com/> www.dnsstuff.com [ SPAM Database ] due to
> this
> my LAN users are not able to send emails.
>
>
>
> Pls suggest me wat I need to do.
>
>
>
> Thanks in advance..
>
>
>
> Regards
>
> ashok
>
>
>
> _____
>
> From: Marco Cordeiro [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 11, 2006 8:15 PM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: RE: [qmailtoaster] Spamassassin how-to improve spam catch
>
>
>
> ok, I enable this feature too and so far so good ;-))
>
>
>
> (I did the test describe in wiki page and seems to be working).
>
>
>
> thanks , Jake.
>
>
>
> _____
>
> From: Jake Vickers [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 11, 2006 11:26 AM
> To: qmailtoaster-list@qmailtoaster.com
> Subject: Re: [qmailtoaster] Spamassassin how-to improve spam catch
>
> Marco Cordeiro wrote:
>
> I did this :
>
>
>
> -r sbl-xbl.spamhaus.org -r bl.spamcop.net -r bl.csma.biz -r
> spamsources.fabel.dk -r dnsbl.njabl.org -r relays.ordb.org -r d
> nsbl.antispam.or.id -r opm.blitzed.org -r list.dsbl.org -r cbl.abuseat.org
>
> I'll watch for 1 week to know what's will happens
>
>
>
> That does help a lot (as long as Spamhaus remains alive), but you'll
> probably still want to follow the instructions here:
> http://wiki.qmailtoaster.com/index.php/SURBL
> (sorry, I posted it as URIBL, but it's really under SURBL). As long as you
> have the memory to spare for this, it's a great addition.
>
>
I did it this way:
I'm using shorewall as firewall, but you cand do it using anything, and
inserted the next two line in rules file:
DROP loc:xxx.34.166.58-xxx.34.166.254 net tcp 25
LOG:info loc net tcp 25
after that inspecting /var/log/messages file you will see wich user is
posibly infected with spyware or trojan and you can tell him to check his
computer, ofcorse that daily logwach you will show those ip's as well
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
