Re: Spamassassin tests help please
dude -- you are SO ready for the open relay database.
you sound pretty harried. that's where i was a few months ago. not to
sound overly dramatic, but www.ordb.org changed my life.
also, i've been compiling a list of networks that send spam from asian
countries like china and korea. when i get 3 pieces of spam from the
same network, and my letters of complaint go unanswered, i block the
entire network using tcpwrappers. my /etc/hosts.deny contains a vast
number of chinese and korean networks. you can manage exim connections
with tcpwrappers by simply running exim as:
smtp stream tcp nowait mail /usr/sbin/tcpd /usr/sbin/exim -bs
in inetd.conf. my 3 pronged approach to spam is:
1. using ordb.org
2. running exim from tcpwrappers and dumping IP's into /ect/hosts.deny
3. spamcop
how effective is this? i was getting *upwards* of 40 pieces of spam per
day.
today i got simply 4 pieces of spam, and this is what i would call a
"heavy spam day".
pete
begin Patrick Kirk <patrick@kirks.net>
> Hi all,
>
> I have given up on using my .forward as a spam filter because I've now
> gone up to over 40 spam pieces a day and its a pain to keep adding
> conditions on each .forward on each account.
>
> Just to make clear, my particular desire to stop stuff from Korean and
> Taiwan is that I speak neither Korean nor Chinese.
>
>
> I wonder if anyone can help with these tests:
>
> 1. I am on numerous Korean spam lists. So I want to exclude all email
> with Korean charsets. How do I set $h_Content-Type: contains
> "ks_c_5601-1987" to score 20?
>
> 2. I get a lot of stuff from Taiwan. Is it poossible to simply
> blacklist all mail relayed from ISPs with .tw tld?
>
> 3. How can I blacklist specific names? For example, esavingszone send
> me two messages every day and I want them automatically blocked. But
> they use differing domain nemaes so I want to block
> esavingszone@foo.net. esavingszone@bar.net and every other
> esavingszone@anything.anything
>
> 4. The ISP that uses hanmail.net and daum.net is the single worst
> offender. Can I block all mail relayed theough these domains?
>
>
> Thanks in advance,
>
> Patrick
>
>
> --
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: