Robert
This concept has to be implemented at the MTA level which will be before the mail is sent to SpamAssassin for checks. The blocking of IP address has to be done at the time of establishment of connection from a remote server to your machine. The punch line is "If you recieve too many spams from a remote server which the SpamAssassin is not able to detect then simply block the IP address of the remote server at the MTA level itself." You can easily get the IP address of the spam originating server from the log files or the header of the spam mails. As of restarting any services I don't know much about Qmail but in case of Sendmail a makemap hash and in Postfix postmap does the job for you, no need to restart the MTA in tht case.
regards Rakesh
Robert Bartlett wrote:
Thanks for the information. What exactly do you look for in a spam message that got through (Meaning were do you get the ip address to block from a spam email header)? Also if I do add the entry in tcp.smtp do I need to restart any services?
Thanks Robert
-----Original Message----- From: Pat Masterson [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 20, 2004 7:47 AM To: Robert Bartlett Subject: Re: Going farther in spam protection
On Tue, 20 Jul 2004, Robert Bartlett wrote:
Has anyone tried blocking by ip? Meaning I read somewhere you can block
access via the tcp.smtp file for qmail. Has anyone done this? If so is this
a good solution? Would you recommend this? If you do recommend this, then
what exactly do I look for in the headers to get the proper address to
block?
Robert, lots of us block by IP. In fact, for every spam we get here that doesnt get stopped by SA, I add the whole class C to my block list, and have been doing so for years. I also merge in to my list one from some guys in Europe. My list currently has 5700 entries (most of Asia in there). I use the sendmail access DB. Stops most of the spam that comes here. -pat
*--------------------------------------------------------------------------- --* * Pat Masterson V01-01, Northrop Grumman, * Ham:KE2LJ * 1 Grumman Road West * President Grumman Amateur * Bethpage, NY 11714 * Radio Club WA2LQO * email: [EMAIL PROTECTED] Fone: 516-346-7125 * www.qsl.net/wa2lqo *--------------------------------------------------------------------------- --*
