Re: Fastest listing RBL ?

2017-02-16 Thread Matus UHLAR - fantomas
On 2017-02-15 16:30, Tom Hendrikx wrote: Note that the period that you describe as 'seen by SA a bit later' is typically less than a second. On 16-02-17 06:22, Ian Zimmerman wrote: Not in my case. I have a custom Exim configuration where I intentionally wait for a period of time (currently 4

Re: Filtering outbound mail

2017-02-16 Thread Robert Schetterer
Am 16.02.2017 um 11:07 schrieb David Jones: > My mail filters also do a lot of outbound relaying from hundreds > of customer mail servers. Compromised accounts happen and I > have some methods for detecting most of them and block the > sender at the MTA within a few minutes to prevent my server >

Re: Filtering outbound mail

2017-02-16 Thread David Jones
>From: Reindl Harald >Sent: Thursday, February 16, 2017 8:55 AM >To: David Jones; Spamassassin List >Subject: Re: Filtering outbound mail   Am 16.02.2017 um 15:49 schrieb David Jones: >> From: Christian Grunfeld >> Sent: Thursday, February 16, 2017 8:29 AM >> To: Spamassassin List >> Subject:

Re: Filtering outbound mail

2017-02-16 Thread David Jones
>From: Dianne Skoll >Sent: Thursday, February 16, 2017 8:30 AM >To: users@spamassassin.apache.org >Subject: Re: Filtering outbound mail   >On Thu, 16 Feb 2017 10:07:46 + >David Jones wrote: >> Would it make sense for me to setup/manage my own custom >> rules for checking the To: header or

Re: Filtering outbound mail

2017-02-16 Thread Christian Grunfeld
2017-02-16 11:49 GMT-03:00 David Jones : > > > Many of the SMTP sending software that my customers > use are not full MTAs with queuing capabilities so some email > would be lost if I rate limited. I also have stupid mail sending > devices like scanners/copiers that could get lumped in with > oth

Re: Filtering outbound mail

2017-02-16 Thread David Jones
>From: Christian Grunfeld >Sent: Thursday, February 16, 2017 8:29 AM >To: Spamassassin List >Subject: Re: Filtering outbound mail >Why not rate limiting? I think everyone is doing itI do... > Cluebringer quotas can track one to one, one to many and >many to one (botnets) in both directions (

Re: Filtering outbound mail

2017-02-16 Thread Dianne Skoll
On Thu, 16 Feb 2017 10:07:46 + David Jones wrote: > Would it make sense for me to setup/manage my own custom > rules for checking the To: header or could the FreeMail plugin > be extended to add new rules like FREEMAIL_TO? The To: header may not contain useful information. I don't think the

Re: Filtering outbound mail

2017-02-16 Thread Christian Grunfeld
Why not rate limiting? I think everyone is doing itI do... Cluebringer quotas can track one to one, one to many and many to one (botnets) in both directions (as sender or recipients) 2017-02-16 11:21 GMT-03:00 David Jones : > >From: Christian Grunfeld > >Sent: Thursday, February 16, 2017

Re: Filtering outbound mail

2017-02-16 Thread David Jones
>From: Christian Grunfeld >Sent: Thursday, February 16, 2017 7:50 AM >To: Spamassassin List >Subject: Re: Filtering outbound mail >Are you using postfix as MTA? I use cluebringer suite which >has a lot of functionality (spf checks, helo checks, greylist >and quotas) I am using Postfix and cluebr

Re: Filtering outbound mail

2017-02-16 Thread Christian Grunfeld
Are you using postfix as MTA? I use cluebringer suite which has a lot of functionality (spf checks, helo checks, greylist and quotas) Quotas are fully configurable by tracking inbound and outbound trafic by ip, sasl user, etc 2017-02-16 9:44 GMT-03:00 David Jones : > >From: Axb > >Sent: Thurs

Re: Filtering outbound mail

2017-02-16 Thread David Jones
>From: Axb >Sent: Thursday, February 16, 2017 4:54 AM >To: users@spamassassin.apache.org >Subject: Re: Filtering outbound mail     >On 02/16/2017 11:07 AM, David Jones wrote: >> Would it make sense for me to setup/manage my own custom >> rules for checking the To: header or could the FreeMail plu

Re: Filtering outbound mail

2017-02-16 Thread Axb
On 02/16/2017 11:07 AM, David Jones wrote: Would it make sense for me to setup/manage my own custom rules for checking the To: header or could the FreeMail plugin be extended to add new rules like FREEMAIL_TO? To block outbound bursts using SA is probably the most inneficient method. Fai2ban i

Filtering outbound mail

2017-02-16 Thread David Jones
My mail filters also do a lot of outbound relaying from hundreds of customer mail servers. Compromised accounts happen and I have some methods for detecting most of them and block the sender at the MTA within a few minutes to prevent my server IPs from becoming listed on RBLs. Customer mail serve

Re: Fastest listing RBL ?

2017-02-16 Thread Tom Hendrikx
On 16-02-17 06:22, Ian Zimmerman wrote: > On 2017-02-15 16:30, Tom Hendrikx wrote: > >> Note that the period that you describe as 'seen by SA a bit later' is >> typically less than a second. > > Not in my case. I have a custom Exim configuration where I > intentionally wait for a period of tim