J,
sorry about that offline email .. :(
Thanks for the answer also. I will definitely make some changes to adjust a
more secure setup ..
Regards ..
Leonard
----- Original Message -----
From: "jdow" <[EMAIL PROTECTED]>
To: "Leonard SA" <[EMAIL PROTECTED]>
Sent: Tuesday, November 22, 2005 8:09 PM
Subject: Re: New Spammer?
That is the general format. I do not have your original message to know
if the data is correct. It almost looks like you are trusting WAY too
much at the 70.119. part. Trust only the mail server(s) from which you
expect to never forge emails itself. In my case I trust the set of
mail servers earthlink lumps as pop3.earthlink.net outside of the local
network.
{^_^}
----- Original Message -----
From: "Leonard SA" <[EMAIL PROTECTED]>
To: "jdow" <[EMAIL PROTECTED]>
Sent: 2005 November, 22, Tuesday 16:38
Subject: Re: New Spammer?
J,
Is the trusted_network your speaking of in the local.cf file as I have
below?
trusted_networks 192.168.2. 127.0.0.1 70.119.
I also use badmailfrom which will block mail at the SMTP level .. is SA
able to stop spam with some sort of BL / WL rules?
Regards ..
Leonard
----- Original Message -----
From: "jdow" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Tuesday, November 22, 2005 6:23 PM
Subject: Re: New Spammer?
Nowhere if he has no trusted network setup. That's his problem in a
nutshell. He cannot usefully run network tests.
{^_^}
----- Original Message -----
From: "Leonard SA" <[EMAIL PROTECTED]>
Where are BLs setup at?
Thanks in advance..
Regards ..
Leonard Bernstein
-------------------------------------
| Email [EMAIL PROTECTED]
| Mobile (917) 807-3883
| BlackBerry PIN 40082120
| Technology Consultant
-------------------------------------
----- Original Message -----
From: "jdow" <[EMAIL PROTECTED]>
To: <users@spamassassin.apache.org>
Sent: Tuesday, November 22, 2005 5:37 PM
Subject: Re: New Spammer?
From: "Matt Kettler" <[EMAIL PROTECTED]>
At 09:56 AM 11/22/2005, Casey King wrote:
This morning we have been getting drilled by spam/virus emails.
Are they spam, or viruses? Not the same thing.
40 so far.
I should be so lucky to see as few as 40/hour during any kind of
outbreak
Been getting a lot of phone calls from across the company about
these emails. At least my mailscanner boxes are stripping the
files, and tagging it as spam, but what worries me, is the low
scores these messages are receiving.
SpamAssassin is a spam scanner. It's official policy is to EXPLICITLY
not care about virus emails. No effort is made to try to catch them,
because doing so would dilute the scores of the spam ruleset. No
effort is made to try to avoid tagging them either. They're just
removed from the corpus and handled by the developers as if they
don't exist.
Heh, I use the ClamAV plugin for SA and give it a hefty score. That
way
I get the best of both worlds. Creative use of BLs also helps.
{^_^}
