How do you stop the recent floods

Rose, Bobby brose at MED.WAYNE.EDU
Wed Jun 16 15:53:24 IST 2004


Running DCC at the MTA level essentially does the same thing because such messages would be considered UBE.  But instead of blocking the system you're just rejecting the messages that have the same hash and whose could has reached your set threshold. 

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Mariano Absatz
Sent: Wednesday, June 16, 2004 10:40 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: How do you stop the recent floods

I haven't tried it out, but http://virbl.bit.nl/ seems like a very good idea... in fact, if your MTA supports it, I'd configure this at the MTA level.


El 16 Jun 2004 a las 9:40, Chris Mason escribió:

> In the good old days, about six months ago, spam came from open 
> relays, Blackhole lists stopped most of it, and the combination of 
> MailScanner and Spamassassin stopped almost all of the rest of it. 
> Then came these spam-relaying virus ridden windows machines, and the 
> torrent began. I am seeing hundreds of emails in a couple of minutes 
> from the same user, same subject, all getting through. MailScanner 
> does not stop them, and the blackhole lists are useless against them.
> 
> Is there anything I can do?
> 
> Chris Mason
> 
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html


--
Mariano Absatz
El Baby
----------------------------------------------------------
It is now proved beyond doubt that smoking is one of the leading causes of statistics.
        -- Fletcher Knebel

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html




More information about the MailScanner mailing list