Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jan 2008 08:48:32 -0500
From:      John Almberg <jalmberg@identry.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: No spam???
Message-ID:  <360AB6AE-B3C1-4CA6-AFC1-378B48B3C6DF@identry.com>
In-Reply-To: <200801150237.m0F2bqEg000116@banyan.cs.ait.ac.th>
References:  <87A9631B-EAC5-41B8-B4C2-001C3ADBA486@identry.com> <200801150237.m0F2bqEg000116@banyan.cs.ait.ac.th>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
I've been doing some more digging since my last post, and have  
figured out that the spam is not being blocked by pf, as I suspected  
(since it wasn't showing up in my spam folder), but by spamassassin  
blacklists.

The smtp log file has lots of entries like:

2008-01-14 09:30:37.074087500 rblsmtpd: 123.20.89.67 pid 72121: 451  
http://www.spamhaus.org/query/bl?ip=123.20.89.67
2008-01-14 09:31:05.271514500 rblsmtpd: 58.227.241.97 pid 72122: 451  
Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml? 
58.227.241.97
2008-01-14 09:31:17.404943500 rblsmtpd: 41.196.155.56 pid 72123: 451  
http://www.spamhaus.org/query/bl?ip=41.196.155.56
2008-01-14 09:31:18.304682500 rblsmtpd: 123.20.89.67 pid 72124: 451  
http://www.spamhaus.org/query/bl?ip=123.20.89.67

So raises the same point that Oliver makes: how trustworthy are these  
blacklists?

-- John

On Jan 14, 2008, at 9:37 PM, Olivier Nicole wrote:

>> I know this is an odd thing to worry about, but is this normal? Since
>> the spam doesn't even seem to be reaching spamd, I'm guessing that
>> the real hero is pf, which must be blocking 99.99% of spam at the
>> packet level.
>
> I don't know how you configured pf, but since I use the black list
> fromhttp://www.sa-blacklist.stearns.org/sa-blacklist/sa- 
> blacklist.current.sendmail-access,
> I reduced drastically the spam that reaches SpamAssassin.
>
> The key point with such black list is that you must trust the list, as
> there is no place for false positive.
>
> Bests,
>
> Olivier
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions- 
> unsubscribe@freebsd.org"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Websites for On-line Collectible Dealers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Identry, LLC
John Almberg
(631) 546-5079
jalmberg@identry.com
www.identry.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?360AB6AE-B3C1-4CA6-AFC1-378B48B3C6DF>