On 11/24/2011 07:46 PM, Maxwell Smart wrote:
Casey wrote:
Hi all,

Been getting some complaints recently from a couple of customers that
have been receiving a bit more spam than usual. Just wanted to see how
others had their spamdyke/simscan/spamassassin/clamav configured.

Spamdyke is definitely doing its job and doing it well on my gateway
servers, as you can see below:

*Gateway1
*This report was generated Mon Nov 21 00:11:55 2011
244499 70.34% DENIED_RDNS_MISSING
37848 10.88% DENIED_RDNS_RESOLVE
25915 7.45% DENIED_GRAYLISTED
24359 7.00% ALLOWED
9045 2.60% TIMEOUT
5106 1.46% DENIED_RBL_MATCH
-------------- Breakdown ---------------
-----------------------------------------
698 0.20% DENIED_SENDER_NO_MX
41 0.01% DENIED_OTHER
28 0.00% ERROR
17 0.00% DENIED_SENDER_BLACKLISTED
11 0.00% DENIED_TOO_MANY_RECIPIENTS
---------------- Summary ----------------
Allowed: 24359 7.00%
Timeout: 9045 2.60%
Errors : 28 0.00%
Denied : 314135 90.38%
Total : 347567 100.00%

*Gateway2*
This report was generated Mon Nov 21 00:06:33 2011

235998 86.06% DENIED_RDNS_MISSING
23896 8.71% DENIED_RDNS_RESOLVE
8414 3.06% DENIED_GRAYLISTED
3570 1.30% TIMEOUT
1092 0.39% ALLOWED
692 0.25% DENIED_RBL_MATCH
-------------- Breakdown ---------------
-----------------------------------------
484 0.17% DENIED_SENDER_NO_MX
57 0.02% DENIED_OTHER
14 0.00% ERROR
---------------- Summary ----------------
Allowed: 1092 0.39%
Timeout: 3570 1.30%
Errors : 14 0.00%
Denied : 269541 98.29%
Total : 274217 100.00%
*
Gateway3*
This report was generated Mon Nov 21 00:05:16 2011

11899 41.92% DENIED_RDNS_RESOLVE
10505 37.01% DENIED_RDNS_MISSING
3237 11.40% DENIED_GRAYLISTED
1970 6.94% TIMEOUT
334 1.17% DENIED_RBL_MATCH
-------------- Breakdown ---------------
-----------------------------------------
219 0.77% DENIED_SENDER_NO_MX
196 0.69% ALLOWED
23 0.08% DENIED_OTHER
1 0.00% DENIED_EARLYTALKER
---------------- Summary ----------------
Allowed: 196 0.69%
Timeout: 1970 6.94%
Errors : 0 0.00%
Denied : 26218 92.36%
Total : 28384 100.00%

Yet, I'm still receiving complaints from a few. I think my
spamassassin boxes need some tuning, but I'm not sure where to start.
How are others handling spamassassin training? I just noticed that
"use_bayes", "use_bayes_rules", and "bayes_auto_learn" were all
previously set to "0", so I enabled them all over the weekend..but I
have the feeling theres a bit more to it than that. For example, what
would be the best way to train SA on servers that are handling
hundreds of domains?

Our gateway servers don't actually have the users or mail stored on
them, they simply accept mail for the domains listed in rcpthosts, and
send them to the appropriate servers using smtproutes. So I'm not sure
how this factors in.

Any help would be appreciated.

Thanks,

Casey
While I agree with Eric that what might be one persons spam and not
another. I have found that the SPAM filter in Thunderbird is very
effective at catching just SPAM. I would like to add those rules to my
toaster to enhance it's SPAM catching ability. Now with many spammers
using correct DNS entries it's getting by Spamdyke. Can we export/import
those filters to the toasters capabilities of culling SPAM? It is still
placed in a SPAM folder and can be periodically checked by customers to
ensure ham is not getting tossed, so I dn't see it being a real bad thing.

I'm not familiar with TBird's spam filtering, but I don't expect migrating it to the server would be as simple as adding rules. I could be wrong though. If you're interested, have a look at TBird source code and see how the adaptive junk controls in Tbird work.

--
-Eric 'shubes'


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Reply via email to