OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Losing My SPAM Battle

From: Gaby vanhegan (gabyvanhegan.net)
Date: Tue Apr 01 2008 - 09:14:01 CDT


On 1 Apr 2008, at 09:30, Carl Corliss wrote:

> On Tue, Apr 1, 2008 at 9:16 AM, Gaby vanhegan <gabyvanhegan.net>
> wrote:
> [snip]
>> I have found dspam/ClamAV/Amavisd-new to be quite effective. I
>> also use the
>> OpenBSD dspam tarpit daemon as well. Very easy to setup, bounces
>> about 75%
>> of the spam straight off.
>
> Did you really mean to say, "discards spam" ...?

Well it doesn't really look at spam and discard it. It checks the IP
of the smtp connection and if it matches it against a list of known
bad IP's then it talks SMTP at a rate of 1 character a second and
responds with a 450 error every time. If the IP doesn't match, the
connection is forwarded on to the real SMTP server, Postfix.

There's no content scanning or decisions made, any IP that matches
the list gets the slow connection and 450 response.

G.

--
Junkets for bunterish lickspittles since 1998!
http://www.playr.co.uk/