get the packages. rebuild them (might not even be necessary) and
extract the needed configuration files from packages.
my spamassassin configuration has following new lines (5 points is still
the spam limit):
skip_rbl_checks 0
score BAYES_99 4.9
score DRUGS_ERECTILE 4.0
score DRUGS_ERECTILE_OBFU 4.0
score NO_DNS_FOR_FROM 10.0
score DRUGS_PAIN 4.0
score MALE_ENHANCE 4.0
# dnsbl-1.uceprotect.net
header RCVD_IN_UCEPROTECT1 rbleval:check_rbl('uceprotect1',
'dnsbl-1.uceprotect.net.','127.0.0.2')
describe RCVD_IN_UCEPROTECT1 Received via a blocked site in
dnsbl-1.uceprotect.net
tflags RCVD_IN_UCEPROTECT1 net
score RCVD_IN_UCEPROTECT1 4.0
# dnsbl-2.uceprotect.net
header RCVD_IN_UCEPROTECT2 rbleval:check_rbl('uceprotect2',
'dnsbl-2.uceprotect.net.', '127.0.0.2')
describe RCVD_IN_UCEPROTECT2 Received via a blocked site in
dnsbl-2.uceprotect.net
tflags RCVD_IN_UCEPROTECT2 net
score RCVD_IN_UCEPROTECT2 1.0
# dnsbl-3.uceprotect.net
header RCVD_IN_UCEPROTECT3 rbleval:check_rbl('uceprotect3',
'dnsbl-3.uceprotect.net.','127.0.0.2')
describe RCVD_IN_UCEPROTECT3 Received via a blocked site in
dnsbl-3.uceprotect.net
tflags RCVD_IN_UCEPROTECT3 net
score RCVD_IN_UCEPROTECT3 1.0
Alberto Maffini wrote:
Hi List...I successfully run a QMT mailserver since 2 years ago. 1
month ago I had a problem. For some reason my delivery was very slow
(approx 30 sec). I found that the problem was Spamhaus checking. Due
to my stupidity I deleted /var/qmail/control/simcontrol and
/var/qmail/control/blacklists and /var/qmail/control/badmailfrom.
Since that moment I am receiving tons of spam mail
Is there someone can help me hardening the sistem fighting spam ?
Following a sample message:
Received: (qmail 19970 invoked by uid 89); 28 Jul 2008 11:24:53 -0000
Received: by simscan 1.3.1 ppid: 19965, pid: 19967, t: 0.4072s
scanners:none
Received: from unknown (HELO ns2.qmailtoaster.com) (209.177.154.102)
by ariel.sylcomed.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 28
Jul 2008 11:24:53 -0000
Received-SPF: none (ariel.sylcomed.com: domain at qmailtoaster.com
does not designate permitted sender hosts)
Received: (qmail 20998 invoked by uid 89); 28 Jul 2008 12:14:49 -0000
Mailing-List: contact [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>; run by ezmlm
Precedence: bulk
List-Post: <mailto:qmailtoaster-list@qmailtoaster.com>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <mailto:[EMAIL PROTECTED]>
Reply-To: qmailtoaster-list@qmailtoaster.com
<mailto:qmailtoaster-list@qmailtoaster.com>
Delivered-To: mailing list qmailtoaster-list@qmailtoaster.com
<mailto:qmailtoaster-list@qmailtoaster.com>
Received: (qmail 20991 invoked by uid 89); 28 Jul 2008 12:14:49 -0000
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on
ns2.qmailtoaster.com
X-Spam-Level:
X-Spam-Status: No, score=-2.1 required=5.0 tests=AWL,BAYES_00,DK_SIGNED,
HTML_50_60,HTML_MESSAGE,SARE_SUB_OBFU_Q1 autolearn=no version=3.1.8
Received-SPF: pass (ns2.qmailtoaster.com: SPF record at
_spf.google.com designates 64.233.182.184 as permitted sender)
Thanks a lot
Alberto Maffini
mobile +39.348.3677402
Sylco S.r.l.Via Pisa, 250
Sesto San Giovanni (MI)
Tel +39.02.2427557 Fax +39.02.2400608
http://www.sylcomed.com
