From: mouss (no email)
Date: Tue Aug 01 2006 - 18:40:41 EDT
Becskei Robert wrote:
> Dear List,
>
> I'm Using Centos 4.3 here, with postfix-2.1.5-4.2.RHEL4
> ,amavisd-new-2.4.2-1.el4.rf , clamd-0.88.3-1.el4.rf,
> spamassassin-3.1.3-1.el4.rf , and rulesdujour with all rulesets enabled.
>
> I capture almost all the spam with this config, but as luck goes , my
> boss
> gets a few spam mails (2-3) weekly and he's kinda mad about it, altought
> I've tried to tell him
> it's impossible to block all spam e-mails.
>
> Is there something else I could add into this configuration ? Maybe I
> should lover the default spam level in amavisd-new ?
>
No. don't.
> I wonder what solution this list is using in order to block spam (if not
> secret) , or anyone else for that matter , since spam is a bigger problem
> then viruses (atleast
> those are always detected with a uptodate definition).
[greylisting]
you may use greylisting, but as I don't use it, I can't tell.
[dnsbl]
this may help, but it won't make your boss happy as some spam will still
get through.
[bayes]
- enable bayes in SA
- ask your boss to provide "missed" messages. if he uses imap, you can
use a folder to put spam in. if using webmail, you can setup some
"report sam" button. if using pop, you'll need to find some way to
resend/bounce/... (unfortunately, if using outlook, the message may have
been destructively modified. if so, move to imap).
- pass these messages to sa-learn
[SA rules]
go shop on http://www.rulesemporium.com/
If you don't know what to take, try these:
70_sare_bayes_poison_nxm.cf
70_sare_html0.cf
70_sare_obfu0.cf
70_sare_random.cf
70_sare_specific.cf
70_sare_spoof.cf
70_sare_uri0.cf
72_sare_redirect_post3.0.0.cf (There is a problem with
SARE_URI_EQUALS. you may want disable this rule, until it is fixed).
99_sare_fraud_post25x.cf
you may also add points on a per-country basis (but keep the scores low
to avoid blocking legitiamet mail). Google for X-Relay-Countries.
|
|
|