Re: Oh ohh. grey listing starting to fail

2008-04-25 Thread John Rudd
SM wrote: At 10:06 24-04-2008, Johnson, S wrote: Thanks for the input. I'm using: Postfix (I drop a ton of connections before the mail is even allowed in to my filters) - 6 RBLs - malformed email tests Spamassassin mimedefang razor2 dcc pyzor bayes lists Mailscanner If you have

Re: Oh ohh. grey listing starting to fail

2008-04-25 Thread SM
At 08:03 25-04-2008, John Rudd wrote: I believe he's calling SpamAssassin during the SMTP session, using mimedefang (a milter). Mailscanner doesn't let you do that (at least, not the last time I used it; it didn't have milter bindings). He's using Mailscanner as well. That package includes

Re: Oh ohh. grey listing starting to fail

2008-04-25 Thread John Rudd
SM wrote: At 08:03 25-04-2008, John Rudd wrote: I believe he's calling SpamAssassin during the SMTP session, using mimedefang (a milter). Mailscanner doesn't let you do that (at least, not the last time I used it; it didn't have milter bindings). He's using Mailscanner as well. That

Oh ohh. grey listing starting to fail

2008-04-24 Thread Johnson, S
After months of doing a great job, I started to get spam back into my system again. Apr 23 16:26:06 mail sqlgrey: grey: new: 82.67.64.191(82.67.64.191), [EMAIL PROTECTED] - [EMAIL PROTECTED] Apr 23 16:26:06 mail postfix/smtpd[23130]: NOQUEUE: reject: RCPT from

Re: Oh ohh. grey listing starting to fail

2008-04-24 Thread Michael Scheidell
From: Johnson, S [EMAIL PROTECTED] Date: Thu, 24 Apr 2008 09:27:33 -0500 To: users@spamassassin.apache.org Conversation: Oh ohh. grey listing starting to fail Subject: Oh ohh. grey listing starting to fail After months of doing a great job, I started to get spam back into my system again. Apr

Re: Oh ohh. grey listing starting to fail

2008-04-24 Thread Benny Pedersen
On Thu, April 24, 2008 16:27, Johnson, S wrote: It sucks that they are now starting to re-queue their stupid spam; why don't they GET A CLUE that we don't want their [EMAIL PROTECTED] why not block the ip ? or: 1: accept if spf is pass 2: accept if dkim signed else reject Benny Pedersen

RE: Oh ohh. grey listing starting to fail

2008-04-24 Thread Johnson, S
Scheidell [mailto:[EMAIL PROTECTED] Sent: Thursday, April 24, 2008 10:12 AM To: Johnson, S; users@spamassassin.apache.org Subject: Re: Oh ohh. grey listing starting to fail From: Johnson, S [EMAIL PROTECTED] Date: Thu, 24 Apr 2008 09:27:33 -0500 To: users@spamassassin.apache.org Conversation

Re: Oh ohh. grey listing starting to fail

2008-04-24 Thread SM
At 07:27 24-04-2008, Johnson, S wrote: After months of doing a great job, I started to get spam back into my system again. Apr 23 16:26:06 mail sqlgrey: grey: new: 82.67.64.191(82.67.64.191), [EMAIL PROTECTED] - mailto:[EMAIL PROTECTED][EMAIL PROTECTED] Apr 23 16:26:06 mail

Re: Oh ohh. grey listing starting to fail

2008-04-24 Thread John Hardin
On Thu, 24 Apr 2008, SM wrote: It's trivial for malware engines to retry. There isn't any queueing, as a standard MTA does, being done. This has been happening since some time. Greylisting only fails if you rely on it to stop spam. Greylisting, like any other antispam technique, blocks

Re: Oh ohh. grey listing starting to fail

2008-04-24 Thread Rob McEwen
Johnson, S wrote: It’s not listed on any of the RBLs yet. Actually, 82.67.64.191 is currently listed on the following DNSBLs: FiveTenSig HostKarma PSBL UceProtect-1 NoMoreFunn But SOME of those are too FP-risky to outright block on, and I don't know if any of these listings existed at the

Re: Oh ohh. grey listing starting to fail

2008-04-24 Thread Chris Hoogendyk
John Hardin wrote: On Thu, 24 Apr 2008, SM wrote: It's trivial for malware engines to retry. There isn't any queueing, as a standard MTA does, being done. This has been happening since some time. Greylisting only fails if you rely on it to stop spam. Greylisting, like any other antispam

RE: Oh ohh. grey listing starting to fail

2008-04-24 Thread Johnson, S
about dkim? Am I missing anything that I can look at? Regards, Scott -Original Message- From: Chris Hoogendyk [mailto:[EMAIL PROTECTED] Sent: Thursday, April 24, 2008 11:27 AM To: SpamAssassin Users List Subject: Re: Oh ohh. grey listing starting to fail John Hardin wrote: On Thu, 24

RE: Oh ohh. grey listing starting to fail

2008-04-24 Thread Johnson, S
@spamassassin.apache.org Subject: Re: Oh ohh. grey listing starting to fail Johnson, S wrote: It's not listed on any of the RBLs yet. Actually, 82.67.64.191 is currently listed on the following DNSBLs: FiveTenSig HostKarma PSBL UceProtect-1 NoMoreFunn But SOME of those are too FP-risky to outright block

RE: Oh ohh. grey listing starting to fail

2008-04-24 Thread SM
At 10:06 24-04-2008, Johnson, S wrote: Thanks for the input. I'm using: Postfix (I drop a ton of connections before the mail is even allowed in to my filters) - 6 RBLs - malformed email tests Spamassassin mimedefang razor2 dcc pyzor bayes lists Mailscanner If you have Mailscanner, you