No spam???

[John Almberg]

I've been doing some more digging since my last post, and have  
figured out that the spam is not being blocked by pf, as I suspected  
(since it wasn't showing up in my spam folder), but by spamassassin  
blacklists.

The smtp log file has lots of entries like:

2008-01-14 09:30:37.074087500 rblsmtpd: 123.20.89.67 pid 72121: 451  
http://www.spamhaus.org/query/bl?ip=123.20.89.67
2008-01-14 09:31:05.271514500 rblsmtpd: 58.227.241.97 pid 72122: 451  
Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml? 
58.227.241.97
2008-01-14 09:31:17.404943500 rblsmtpd: 41.196.155.56 pid 72123: 451  
http://www.spamhaus.org/query/bl?ip=41.196.155.56
2008-01-14 09:31:18.304682500 rblsmtpd: 123.20.89.67 pid 72124: 451  
http://www.spamhaus.org/query/bl?ip=123.20.89.67

So raises the same point that Oliver makes: how trustworthy are these  
blacklists?

-- John

On Jan 14, 2008, at 9:37 PM, Olivier Nicole wrote:

>> I know this is an odd thing to worry about, but is this normal? Since
>> the spam doesn't even seem to be reaching spamd, I'm guessing that
>> the real hero is pf, which must be blocking 99.99% of spam at the
>> packet level.
>
> I don't know how you configured pf, but since I use the black list
> fromhttp://www.sa-blacklist.stearns.org/sa-blacklist/sa- 
> blacklist.current.sendmail-access,
> I reduced drastically the spam that reaches SpamAssassin.
>
> The key point with such black list is that you must trust the list, as
> there is no place for false positive.
>
> Bests,
>
> Olivier
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions- 
> unsubscribe at freebsd.org"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Websites for On-line Collectible Dealers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Identry, LLC
John Almberg
(631) 546-5079
jalmberg at identry.com
www.identry.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~