[BlueOnyx:06502] Re: OWM and Spam

[Ken - Precision Web Hosting, Inc]

----- Original Message ----- 
From: "Darrell D. Mobley" <dmobley at uhostme.com>

>>
>> > Bump.  I know there are other BX machines with OWM on them, does anyone
>> > else
>> > have problems with the filter_fakedfrom trapping legitimate mail 
>> > because
>> > the
>> > originator of an email is on one ISP and the recipient is on another?
>>
>> Darrell
>>
>> We always suggest turning those OWM filters off.
>>
>> Just let the server's spamassassin and the blocklists stop the spam.
>
> My server doesn't have Spamassassin.  I am under the impression it is a
> resource hog.  I had the filters off, but the client was inundated with 
> spam
> from using the same email address for 15 years listed on his website and
> Network Solutions' WHOIS database.  Legitimate mail was lost if the sea of
> spam.
>
> _______________________________________________
>

In the past, mailscanner  would tend to get stuck on overquota accounts and 
consume CPU cycles endlessly. I automatically increase quotas on over quota 
accounts.

The current  Spamassassin from solarspeed does not use mailscanner. The only 
other thing that tends to use resources is the "Use Bayes:" option. I 
disable that.


Also, an easy way to block a lot of spam with very little overhead,  is 
blacklists in the sendmail.cf    It should work to:
1.  select the delay checks from the GUI
2. Find  the line below in the sendmail.cf
### check_relay -- check hostname/address on SMTP startup
3. Then at the bottom of that section add the balcklists:



#then at bottom of that section (right above

###  check_mail -- check SMTP `MAIL FROM:' command argument

add the blacklists



# DNS based IP address spam list cbl.abuseat.org -5 lines blow each starts 
with R

R$* $: $&{client_addr}

R::ffff:$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.cbl.abuseat.org. $: OK $)

R$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.cbl.abuseat.org. $: OK $)

R<?>OK $: OKSOFAR

R<?>$+ $#error $@ 5.7.1 $: "Spam blocked see: 
http://cbl.abuseat.org/lookup.cgi?ip="$&{client_addr}

　

# DNS based IP address spam list bl.spamcop.net -5 lines blow each starts 
with R

R$* $: $&{client_addr}

R::ffff:$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.bl.spamcop.net. $: OK $)

R$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.bl.spamcop.net. $: OK $)

R<?>OK $: OKSOFAR

R<?>$+ $#error $@ 5.7.1 $: "Spam blocked see: 
http://spamcop.net/bl.shtml?"$&{client_addr}

　

# DNS based IP address spam list combined.njabl.org -5 lines blow each 
starts with R

R$* $: $&{client_addr}

R::ffff:$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.combined.njabl.org. $: OK $)

R$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.combined.njabl.org. $: OK $)

R<?>OK $: OKSOFAR

R<?>$+ $#error $@ 5.7.1 $: "Spam blocked see: 
http://njabl.org/cgi-bin/lookup.cgi?query="$&{client_addr}

　

# DNS based IP address spam list bhnc.njabl.org -5 lines blow each starts 
with R

R$* $: $&{client_addr}

R::ffff:$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.bhnc.njabl.org. $: OK $)

R$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.bhnc.njabl.org. $: OK $)

R<?>OK $: OKSOFAR

R<?>$+ $#error $@ 5.7.1 $: "Spam blocked see: 
http://njabl.org/cgi-bin/lookup.cgi?query="$&{client_addr}

　

# DNS based IP address spam list zen.spamhaus.org   -5 lines blow each 
starts with R

R$* $: $&{client_addr}

R::ffff:$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.zen.spamhaus.org. $: OK $)

R$-.$-.$-.$- $: <?> $(host $4.$3.$2.$1.zen.spamhaus.org. $: OK $)

R<?>OK $: OKSOFAR

R<?>$+ $#error $@ 5.7.1 $: "550 Email rejected. See 
http://www.spamhaus.org/query/bl?ip="$&{client_addr}




Then restart sendmail.

----
Ken M
Precision Web Hosting, Inc.
http://www.precisionweb.net