Re: [qmailtoaster] spamdyke - spamassassin

[Maxwell Smart]

On 11/18/2012 02:16 AM, Giuseppe Perna wrote:

Good morning to all,
I read a lot of documentation on spamdyke and spamassassin but I did
not understand a few things:

I'll post my understanding which is by no means gospel.


1) I have installed on my system (qnmailtoaster up date ) spamdyke
from this time spamassassin is uninstalled or work together?

They work independently.  Spamdyke blocks e mails based on it's rDNS


2) spamdyke merely accept or reject, if a message is blocked, the
message is not saved in the spam folder of server?

It's not saved, it's rejected before it ever reaches the mail server.


3) spamassassin blocks a message, where the message can be saved?
Spamassassin scans a message to determine if it's SPAM based on a score, 
then delivers the message with an appended Subject line. Default is 
***SPAM***


4) the configuration file spamdyke are here: / etc / spamdyke /
to increase or decrease the sensitivity of spamdyke I can only change
these entries?
dns-blacklist-entry = zen.spamhaus.org
dns-blacklist-entry = bl.spamcop.net

or add another dns list


5) the configuration files of spamassassin are here: / etc / mail /
spamassassin /
to increase or decrease the sensitivity of spamassassin I can only
change these entries?
required_score

Changing the score is one way.  I believe you can also us spam lists


thanks

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] spamdyke - spamassassin

[Giuseppe Perna]

Good morning to all,
I read a lot of documentation on spamdyke and spamassassin but I did
not understand a few things:

1) I have installed on my system (qnmailtoaster up date ) spamdyke
from this time spamassassin is uninstalled or work together?

2) spamdyke merely accept or reject, if a message is blocked, the
message is not saved in the spam folder of server?

3) spamassassin blocks a message, where the message can be saved?

4) the configuration file spamdyke are here: / etc / spamdyke /
to increase or decrease the sensitivity of spamdyke I can only change
these entries?
dns-blacklist-entry = zen.spamhaus.org
dns-blacklist-entry = bl.spamcop.net

5) the configuration files of spamassassin are here: / etc / mail /
spamassassin /
to increase or decrease the sensitivity of spamassassin I can only
change these entries?
required_score

thanks

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spamdyke/SpamAssassin blacklisting

[Casey Price]

Is the blacklisting function used by spamdyke & spamassassin case 
sensitive? For example, would blacklisting j...@domain.com effectively 
blacklist j...@domain.com as well?


Thanks,

--
Casey Price

Smile Global Technical Support
Submit or check trouble tickets http://billing.smileglobal.com
www.smileglobal.com 

Follow us on Twitter 
Find us on Facebook 

Re: [qmailtoaster] Spamdyke/SpamAssassin config recommendations?

[Carlos Herrera Polo]

Spamdyke is an excelent option for stop spam.

Not problem Eric... I can't install qmail without spamdyke :)



2011/10/12, Casey :
> Thanks Eric. Should have known better than to ask before I did my
> homework ;-)
> Casey
>
> Smile Global Technical Support
> Submit or check trouble tickets http://billing.smileglobal.com
> www.smileglobal.com 
>
> On 10/12/11 6:30 PM, Eric Shubert wrote:
>> http://www.spamdyke.org/documentation/README.html#RDNS
>>
>> On 10/12/2011 06:24 PM, Casey wrote:
>>> Thanks Carlos. What exactly do each of these settings do? The 2nd one
>>> seems pretty obvious, but for the first, is that saying that if the IP
>>> address is part of the rdns name then mail should be rejected?
>>>
>>> Thanks,
>>>
>>> Casey
>>>
>>> Smile Global Technical Support
>>> Submit or check trouble tickets http://billing.smileglobal.com
>>> www.smileglobal.com 
>>>
>>> On 10/12/11 4:19 PM, Carlos Herrera Polo wrote:
 And enable:

 reject-ip-in-cc-rdns
 reject-unresolvable-rdns




 2011/10/12 Eric Shubert mailto:e...@shubes.net>>

 Enable a couple blacklists. I use spamhaus and spamcop. I don't
 recall ever finding a false positive with them.
 --
 -Eric 'shubes'


 On 10/12/2011 03:15 PM, Casey wrote:

 Here it is (I'm not the one that initially set it up, so I'm
 looking for
 ways to improve it):

 #dns-blacklist-entry=zombie.dnsbl.sorbs.net
 
 #dns-blacklist-entry=dul.dnsbl.sorbs.net
 
 #dns-blacklist-entry=bogons.cymru.com 
 #dns-blacklist-entry=zen.spamhaus.org 
 #dns-blacklist-entry=bl.spamcop.net 
 #Graylist settings
 graylist-dir=/var/spamdyke/graylist
 graylist-level=always-create-dir
 graylist-max-secs=2678400
 graylist-min-secs=180
 greeting-delay-secs=5
 idle-timeout-secs=60
 ip-blacklist-file=/etc/spamdyke/blacklist_ip

 ip-in-rdns-keyword-blacklist-file=/etc/spamdyke/blacklist_keywords

 ip-in-rdns-keyword-whitelist-file=/etc/spamdyke/whitelist_keywords
 ip-whitelist-file=/etc/spamdyke/whitelist_ip
 local-domains-file=/var/qmail/control/rcpthosts
 log-level=info
 log-target=stderr
 max-recipients=50
 #policy-url=http://my.policy.explanation.url/
 rdns-blacklist-file=/etc/spamdyke/blacklist_rdns
 rdns-whitelist-file=/etc/spamdyke/whitelist_rdns
 recipient-blacklist-file=/etc/spamdyke/blacklist_recipients
 recipient-whitelist-file=/etc/spamdyke/whitelist_recipients
 reject-empty-rdns
 #reject-ip-in-cc-rdns
 reject-missing-sender-mx
 #reject-unresolvable-rdns
 sender-blacklist-file=/etc/spamdyke/blacklist_senders
 sender-whitelist-file=/etc/spamdyke/whitelist_senders
 tls-certificate-file=/var/qmail/control/servercert.pem

 Thanks Eric.

 Casey

 Smile Global Technical Support
 Submit or check trouble tickets http://billing.smileglobal.com
 www.smileglobal.com 
 


 On 10/12/11 3:03 PM, Eric Shubert wrote:

 On 10/12/2011 02:53 PM, Casey wrote:

 Hi all,

 Been getting an increased amount of spam lately in
 addition to
 complaints from some customers and I'm trying to
 figure out the best way
 to cut it down a bit.

 Theres been alot of foreign spam coming into my
 mailbox recently heres
 and example:


 Return-Path:>>> >

 Delivered-To:ca...@smileglobal.com
 
 Received: (qmail 29118 invoked by uid 89); 11 Oct 2011
 03:50:13 -
 Mailing-List: contactisales-h...@smileglobal.com
 ; run by ezmlm
 Precedence: bulk
 X-No-Archive: yes
 List-Post:>
 List-Help:>

 List-Unsubscribe:>

 List-Subscribe:

[qmailtoaster] Spamdyke/SpamAssassin config recommendations?

[Casey]

Hi all,

Been getting an increased amount of spam lately in addition to 
complaints from some customers and I'm trying to figure out the best way 
to cut it down a bit.


Theres been alot of foreign spam coming into my mailbox recently heres 
and example:


Return-Path:
Delivered-To: ca...@smileglobal.com
Received: (qmail 29118 invoked by uid 89); 11 Oct 2011 03:50:13 -
Mailing-List: contact isales-h...@smileglobal.com; run by ezmlm
Precedence: bulk
X-No-Archive: yes
List-Post:
List-Help:
List-Unsubscribe:
List-Subscribe:
Delivered-To: mailing list isa...@smileglobal.com
Received: (qmail 29112 invoked by uid 89); 11 Oct 2011 03:50:13 -
Message-ID:<20111011035013.29111.qm...@smileglobal.com>
Delivered-To: sa...@smileglobal.com
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa1.smileglobal.com
X-Spam-Level: 
X-Spam-Status: Yes, score=4.5 required=4.2 tests=GAPPY_SUBJECT,HTML_MESSAGE,
HTML_OBFUSCATE_05_10,MIME_QP_LONG_LINE,MISSING_MID,RDNS_NONE
autolearn=disabled version=3.2.5
X-Spam-Report:
*  0.0 MISSING_MID Missing Message-Id: header
*  2.0 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t
*  0.0 HTML_MESSAGE BODY: HTML included in message
*  0.6 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
*  1.8 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
*  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Received-SPF: softfail (sa1.smileglobal.com: transitioning SPF record at 
spf.bulletmail.jp does not designate 69.7.35.14 as permitted sender)
UserAgent: SquirrelMail/1.4.3a
X-Mailer: SquirrelMail/1.4.3a
X-Priority: 3 (Normal)
Importance: Normal
To: sa...@smileglobal.com
From: =?ISO-2022-JP?B?GyRCJS4laSUuJWkbKEI=?=


So as you can see, our primary SA box has tagged the message, but it sure would 
be nice if it got blocked completely.

Not sure the best way to accomplish that would be -- whether it be through 
spamassassin, or spamdyke?

Just looking for a few recommendations on settings that I might need to enable.

Thanks!

--
Casey

Smile Global Technical Support
Submit or check trouble tickets http://billing.smileglobal.com
www.smileglobal.com