[prev in list] [next in list] [prev in thread] [next in thread] 

List:       incidents
Subject:    Re: Massive SPAM Increase {-2.6}
From:       "Kurt Seifried" <bt () seifried ! org>
Date:       2006-10-09 4:06:24
Message-ID: 002001c6eb58$49547900$1a11a8c0 () dog64
[Download RAW message or body]

>> You got joe-jobbed.
>>
>> http://en.wikipedia.org/wiki/Joe_job
>
> What MTA do you run?

seifried.org Mail looks like this:

Internet
|
Firewall - OpenBSD with spamd (defaults) and very agressive 
greytrapping.This catches about 90% of my spam (the main idea is to reduce 
load on spamassassin and make sure I'm talking to a real mail server). For 
example if you try to email kurs@seifried.org or kuru@seifried.org you get 
black listed (so often spammers go in alphabetical order hit those before 
kurt@seifried.org) I also have a script that checks the maillogs for 
undeliverable addresses and adds those (about 3000 in all added, very few 
new ones being added now).
|
Incoming MX servers - two servers running Postfix with various anti-spam 
things enabled.
|
Mail server - Postfix server with spamassassin and some procmail filtering 
for attachments/etc to my personal accounts. IMAPS server for mail 
retrieval.

So currently I have two main lines of defense against spam: OpenBSD spamd 
and spamassassin. I have not yet enabled Bayes filtering, which would 
provide an additional level of spam filtering (I get 2-3 spams a day to my 
accounts so it's not enough to bother me enough to setup Bayes filtering).

> Vini

-Kurt 


------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas. 
World renowned security experts reveal tomorrow's threats today. Free of 
vendor pitches, the Briefings are designed to be pragmatic regardless of your 
security environment. Featuring 36 hands-on training courses and 10 conference 
tracks, networking opportunities with over 2,500 delegates from 40+ nations. 

http://www.blackhat.com
------------------------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]