OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [pfx] Re: Adding DSPAM to existing Postfix installation

From: Benjamin Donnachie (benjaminpythagoras.no-ip.org)
Date: Fri Oct 13 2006 - 09:51:30 CDT


Charles Gregory wrote:
> I'm using,
> maps_rbl_domains = combined.njabl.org sbl.spamhaus.org dnsbl.ahbl.org

I'm using:
                reject_rbl_client sbl-xbl.spamhaus.org,
                reject_rbl_client relays.ordb.org,
                reject_rbl_client list.dsbl.org,
                reject_rbl_client dul.dnsbl.sorbs.net,
                reject_rbl_client spam.tqmcube.com,
                reject_rbl_client spam.dnsbl.sorbs.net,

> I had a few others before, like ordb.org, but removed it because it was
> getting very few hits - the other lists were handling them.

I've only been using rbls for about the last 36 hours, and I also
tightened up my HELO restrictions at the same time which also seems to
be catching a lot. I have been using greylisting for some time as well
but that has been unable to cope on its own lately.

The vast majority of spam blocked by the rbls are picked up by
sbl-xbl.spamhaus.org followed by spam.tqmcube.com and then
dul.dnsbl.sorbs.net on my system. I don't think any of the others have
had any hits yet.

> But these rbls are only catching less than half of the spam.
> Would you suggest any other rbls as good at catching a lot of mail?

Most of the hits on sbl-xbl, and hence most of my hits overall,
originate from cbl.abuseat.org. It also incorporates parts of
njabl.org, so it might be worth replacing njabl and spamhaus with sbl-xbl.

spam.tqmcube.com seems very good, mopping up the few that the others
miss, but is suffering from overload! tqmcube.com hope to solve that
with additional mirrors soon though.

So far I've been very impressed; I've received just one spam in my
account compared to over a hundred the day before! :-)

Take care,

Ben