http://www.spamdyke.org/documentation/README.html#RDNS

On 10/12/2011 06:24 PM, Casey wrote:
Thanks Carlos. What exactly do each of these settings do? The 2nd one
seems pretty obvious, but for the first, is that saying that if the IP
address is part of the rdns name then mail should be rejected?

Thanks,

Casey

Smile Global Technical Support
Submit or check trouble tickets http://billing.smileglobal.com
www.smileglobal.com <http://www.smileglobal.com>

On 10/12/11 4:19 PM, Carlos Herrera Polo wrote:
And enable:

reject-ip-in-cc-rdns
reject-unresolvable-rdns




2011/10/12 Eric Shubert <[email protected] <mailto:[email protected]>>

    Enable a couple blacklists. I use spamhaus and spamcop. I don't
    recall ever finding a false positive with them.
    --
    -Eric 'shubes'


    On 10/12/2011 03:15 PM, Casey wrote:

        Here it is (I'm not the one that initially set it up, so I'm
        looking for
        ways to improve it):

        #dns-blacklist-entry=zombie.dnsbl.sorbs.net
        <http://zombie.dnsbl.sorbs.net>
        #dns-blacklist-entry=dul.dnsbl.sorbs.net
        <http://dul.dnsbl.sorbs.net>
        #dns-blacklist-entry=bogons.cymru.com <http://bogons.cymru.com>
        #dns-blacklist-entry=zen.spamhaus.org <http://zen.spamhaus.org>
        #dns-blacklist-entry=bl.spamcop.net <http://bl.spamcop.net>
        #Graylist settings
        graylist-dir=/var/spamdyke/graylist
        graylist-level=always-create-dir
        graylist-max-secs=2678400
        graylist-min-secs=180
        greeting-delay-secs=5
        idle-timeout-secs=60
        ip-blacklist-file=/etc/spamdyke/blacklist_ip
        ip-in-rdns-keyword-blacklist-file=/etc/spamdyke/blacklist_keywords
        ip-in-rdns-keyword-whitelist-file=/etc/spamdyke/whitelist_keywords
        ip-whitelist-file=/etc/spamdyke/whitelist_ip
        local-domains-file=/var/qmail/control/rcpthosts
        log-level=info
        log-target=stderr
        max-recipients=50
        #policy-url=http://my.policy.explanation.url/
        rdns-blacklist-file=/etc/spamdyke/blacklist_rdns
        rdns-whitelist-file=/etc/spamdyke/whitelist_rdns
        recipient-blacklist-file=/etc/spamdyke/blacklist_recipients
        recipient-whitelist-file=/etc/spamdyke/whitelist_recipients
        reject-empty-rdns
        #reject-ip-in-cc-rdns
        reject-missing-sender-mx
        #reject-unresolvable-rdns
        sender-blacklist-file=/etc/spamdyke/blacklist_senders
        sender-whitelist-file=/etc/spamdyke/whitelist_senders
        tls-certificate-file=/var/qmail/control/servercert.pem

        Thanks Eric.

        Casey

        Smile Global Technical Support
        Submit or check trouble tickets http://billing.smileglobal.com
        www.smileglobal.com <http://www.smileglobal.com>
        <http://www.smileglobal.com>


        On 10/12/11 3:03 PM, Eric Shubert wrote:

            On 10/12/2011 02:53 PM, Casey wrote:

                Hi all,

                Been getting an increased amount of spam lately in
                addition to
                complaints from some customers and I'm trying to
                figure out the best way
                to cut it down a bit.

                Theres been alot of foreign spam coming into my
                mailbox recently heres
                and example:

                
Return-Path:<isales-return-23910-smileglobal.com-casey=smileglobal....@smileglobal.com
                <mailto:[email protected]>>

                Delivered-To:[email protected]
                <mailto:delivered-to%[email protected]>
                Received: (qmail 29118 invoked by uid 89); 11 Oct 2011
                03:50:13 -0000
                Mailing-List: [email protected]
                <mailto:[email protected]>; run by ezmlm
                Precedence: bulk
                X-No-Archive: yes
                List-Post:<mailto:[email protected]
                <mailto:[email protected]>>
                List-Help:<mailto:[email protected]
                <mailto:[email protected]>>
                List-Unsubscribe:<mailto:[email protected]
                <mailto:[email protected]>>
                List-Subscribe:<mailto:[email protected] 
<mailto:[email protected]>>
                Delivered-To: mailing [email protected]
                <mailto:[email protected]>
                Received: (qmail 29112 invoked by uid 89); 11 Oct 2011
                03:50:13 -0000
                Message-ID:<[email protected]
                <mailto:[email protected]>>
                Delivered-To:[email protected]
                <mailto:delivered-to%[email protected]>
                X-Spam-Flag: YES
                X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
                sa1.smileglobal.com <http://sa1.smileglobal.com>
                X-Spam-Level: ****
                X-Spam-Status: Yes, score=4.5 required=4.2
                tests=GAPPY_SUBJECT,HTML_MESSAGE,
                HTML_OBFUSCATE_05_10,MIME_QP_LONG_LINE,MISSING_MID,RDNS_NONE
                autolearn=disabled version=3.2.5
                X-Spam-Report:
                * 0.0 MISSING_MID Missing Message-Id: header
                * 2.0 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t
                * 0.0 HTML_MESSAGE BODY: HTML included in message
                * 0.6 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10%
                HTML obfuscation
                * 1.8 MIME_QP_LONG_LINE RAW: Quoted-printable line
                longer than 76 chars
                * 0.1 RDNS_NONE Delivered to trusted network by a host
                with no rDNS
                Received-SPF: softfail (sa1.smileglobal.com
                <http://sa1.smileglobal.com>: transitioning SPF record
                at spf.bulletmail.jp <http://spf.bulletmail.jp> does
                not designate 69.7.35.14 as permitted sender)
                UserAgent: SquirrelMail/1.4.3a
                X-Mailer: SquirrelMail/1.4.3a
                X-Priority: 3 (Normal)
                Importance: Normal
                To:[email protected]
                <mailto:to%[email protected]>
                From:
                =?ISO-2022-JP?B?GyRCJS4laSUuJWkbKEI=?=<[email protected]
                <mailto:[email protected]>>


                So as you can see, our primary SA box has tagged the
                message, but it
                sure would be nice if it got blocked completely.

                Not sure the best way to accomplish that would be --
                whether it be
                through spamassassin, or spamdyke?

                Just looking for a few recommendations on settings
                that I might need
                to enable.

                Thanks!

                --
                Casey

                Smile Global Technical Support
                Submit or check trouble tickets
                http://billing.smileglobal.com
                www.smileglobal.com <http://www.smileglobal.com>
                <http://www.smileglobal.com>


            Having spamdyke reject it would be preferable, of course.
            What's your spamdyke config? (In your gateway host)



    --
    -Eric 'shubes'


    
---------------------------------------------------------------------------------
    Qmailtoaster is sponsored by Vickers Consulting Group
    (www.vickersconsulting.com <http://www.vickersconsulting.com>)
    Vickers Consulting Group offers Qmailtoaster support and
    installations.
    If you need professional help with your setup, contact them today!
    
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com <http://qmailtoaster.com> for the
    latest news, updates, and packages.
    To unsubscribe, e-mail:
    [email protected]
    <mailto:[email protected]>
    For additional commands, e-mail:
    [email protected]
    <mailto:[email protected]>





--
-Eric 'shubes'


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
    For additional commands, e-mail: [email protected]


Reply via email to