Loosing spam fight
joao at matik.com.br
Thu Jan 25 10:29:02 UTC 2007
On Thursday 25 January 2007 04:08, Peter N. M. Hansteen wrote:
> For purposes of making the subject less true, setting up greylisting
> with an optional tarpit for known baddies can be very effective. See
> Dan Langille's recent Onlamp article or for that matter my tutorial
> for how this is done using PF and spamd - this way it doesn't matter much
> which MTA(s) you use.
>  http://www.onlamp.com/pub/a/bsd/2007/01/18/greylisting-with-pf.html
>  http://home.nuug.no/~peter/pf/en/, with the specifics of spamd and
> greylisting starting at http://home.nuug.no/~peter/pf/en/spamd.html
all this methods are certainly useless, stay calm ok
the only way to block spam really is blocking any incoming tcp:25 ...
any firewall based method you may use do block innocents as well, ike some do
they block entire IP ranges from countries because most spam comes from them,
that is stupid, more brainless since the spam mostly is not generated by any
of this servers, it only goes through it, this method might cause *you* not
getting this spam but does not stop spam at all ...
probably better, if you like firewall blocks, cutting the complete US IP
address space from sending to any tcp:25 to stop spam definitly, because I
never heard of chinese or african viagra hahahaha
spam block list abviously are very usefull so long as they are maintained
IMO a good way and probably the best way is to do some inicial checks like
connection rate and limit them, then a spam checker like spamassassin for
regex and header checks
still you get SPAM and you never can block spam 100%, spammers change servers,
IPs, patterns faster then we can react, but we all know this right?
and even then if you get it all into your box you still get spam by whom sends
it out without caring of identity or hiding it, a correct email msg but spam
where spam needs to be catched is at the origin, ISPs should take care of this
problem by not permitting access to outside servers but only passing through
their smtp gateways, an outgoing spam check is what needs to be done but
here nobody cares ...
A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
More information about the freebsd-stable