Re: [AMaViS-user] rbl in SA or in MTA, which is better
On 9/7/07, Dave McGuire <[EMAIL PROTECTED]> wrote: > /../ on my systems at least, having the MTA > do it ahead of amavis means much less traffic going through the > lumbering pig that is SpamAssassin. I'd love to have the RBL stuff > folded into the main scoring system but I'd need three times the > hardware for all that slow-ass Perl code. :-( You mean you're not running greylisting in front of SA? greylisting still stops 80% of all mail-traffic here, even on the worst days. HM - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] rbl in SA or in MTA, which is better
On Fri, Sep 07, 2007 at 01:07:30PM -0600, Miguel wrote: > I mean, both can do the same tests, where is the best place to do that? > regards Either or both, depending. You may see a significant reduction in the load on your mailserver if you check high-reliability BLs like the CBL or the Spamhaus XBL (which includes the CBL) in the MTA, and then check a broader range of BLs in SA under amavisd. But it really depends on your situation and your userbase. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] rbl in SA or in MTA, which is better
Miguel wrote: > I mean, both can do the same tests, where is the best place to do that? > regards do both: - use few "safe" DNSBLs (zen.spamhaus.org for example) in the MTA to reject transaction without having to process data or queue the message - use whatever DNSBLs you want in SA. - you can combine "moderately safe" DNSBLs in something like policyd-weight, to get scoring at SMTP time. - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] rbl in SA or in MTA, which is better
On Sep 7, 2007, at 3:15 PM, Alexander Wirt wrote: >> I mean, both can do the same tests, where is the best place to do >> that? >> regards > If you don't have the option to merge the results of several rbls > together, > don't use them at smtp time. RBLs make errors, several freemailer, big > providers and others got regulary on several blacklist. > Additionally you > don't want to give control over your E-Mail traffic into *one* hand. > > SA ist the best choice you have under most circumstances. There the > result of > the RBL is "part" of the score and not a ultimativly decision. I have to agree here, but on my systems at least, having the MTA do it ahead of amavis means much less traffic going through the lumbering pig that is SpamAssassin. I'd love to have the RBL stuff folded into the main scoring system but I'd need three times the hardware for all that slow-ass Perl code. :-( -Dave -- Dave McGuire Port Charlotte, FL Farewell Ophelia, 9/22/1991 - 7/25/2007 - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] rbl in SA or in MTA, which is better
Alexander Wirt escribió: > Miguel schrieb am Freitag, den 07. September 2007: > > >> I mean, both can do the same tests, where is the best place to do that? >> regards >> > If you don't have the option to merge the results of several rbls together, > don't use them at smtp time. RBLs make errors, several freemailer, big > providers and others got regulary on several blacklist. Additionally you > don't want to give control over your E-Mail traffic into *one* hand. > > SA ist the best choice you have under most circumstances. There the result of > the RBL is "part" of the score and not a ultimativly decision. > > Hope that helps > > Alex > OK, totally clear, thanks > > - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] rbl in SA or in MTA, which is better
Miguel schrieb am Freitag, den 07. September 2007: > I mean, both can do the same tests, where is the best place to do that? > regards If you don't have the option to merge the results of several rbls together, don't use them at smtp time. RBLs make errors, several freemailer, big providers and others got regulary on several blacklist. Additionally you don't want to give control over your E-Mail traffic into *one* hand. SA ist the best choice you have under most circumstances. There the result of the RBL is "part" of the score and not a ultimativly decision. Hope that helps Alex - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] rbl in SA or in MTA, which is better
Unless you want to block emails solely based on the RBL response, do it in SA. Then the response will add to the total score, which is the preferred way (AFAIK). //Martin On Friday 07 September 2007 21:07:30 Miguel wrote: > I mean, both can do the same tests, where is the best place to do that? > regards > - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] rbl in SA or in MTA, which is better
I mean, both can do the same tests, where is the best place to do that? regards - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
