Help! ....We are taking 120k msgs per day and climbing

[Support ePaxsys/FRWS]

At 01:54 PM 6/16/04 -0700, Chris W. Parker wrote:
>Raymond Dijkxhoorn <mailto:raymond at PROLOCATION.NET>
>     on Wednesday, June 16, 2004 12:49 PM said:
>
> >>> FEATURE(`dnsbl', `sbl-xbl.spamhaus.org', `"550 5.7.1 ACCESS DENIED
> >>> to <"$&f"> thru "$&{client_name}" by The Spamhaus SBL+XBL DNSBL ;
> >>> Please visit http://www.spamhaus.org/ for more information."')dnl
>
>[snip]
>
> > If you want to do RBL rejects i really would suggest you start using
> > DSBL for that. SpamHaus is i think also nice, but i'd first check
> > with DSBL.
>
>are you suggesting that instead of sbl-xbl.spamhaus.org it should be
>dsbl.spamhaus.org? if not, would you please clarify what you mean?
>
>
>
>thanks,
>chris.
>
>-------------------------- MailScanner list ----------------------
>To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
>http://www.mailscanner.biz/maq/     and the archives at
>http://www.jiscmail.ac.uk/lists/mailscanner.html

As a late-comer to this thread, all the suggestions are good. With
high-volume mail servers, and we have a few - we use the DNSBL lists right
in Sendmail before the mail can get onto the system. It really lessened the
load, lets us run MailScanner to scan for Viruses and then procmail
filtering before delivery. The system also works nicely for forwarded
domains (to IIS and Groupwise servers - here we use a small milter to trap
SPAM instead of procmail). We get very few complaints about
false-positives. Very few.

And we use multiple DNSBL lists within Sendmail, also.
We us:
sbl-xbl.spamhaus.org
dul.dnsbl.sorbs.net
relays.ordb.org
list.dsbl.org
(in that order, on all servers)

And a few DNSBLs we host ourselves to further block Dynamic/Dialup lines,
some portions of countries and our own internal "you spammed us" list.

Use the ones that do the least damage, IMHO. Those above have not caused us
any problems and do the job they say they will do.

And yes, use delay_checks and that way YOU can whitelist things in the
access.db if you have to.

"My 2 cents for this week"

JPP

ePaxsys/FRWS Technical Staff
ePaxsys, Inc. http://www.epaxsys.net
FRWS: http://www.frws.com

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html