A way to check for check..

[Martin Hepworth]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Ugo Bellavance wrote:
> Marcel Blenkers wrote:
> 
>>Hi there,
>>
>>
>>
>>
>>>Yes. Read your logs.
>>>
>>>
>>>
>>
>>oh..
>>i did..
>>
>>Log Speed = yes
>>Log Spam = yes
>>Log Non Spam = yes
>>Log Permitted Filenames = yes
>>Log Permitted Filetypes = yes
>>Log Silent Viruses = yes
>>Log Dangerous HTML Tags = yes
>>
>>And there is no entry for RBL-Checks..
>>
>>or should i set something different to yes?
>>
>>Thanks in advance..
>>
>>Marcel
>>
> 
> 
> Not your log settings, your logs.
> 
> Btw, we are having a similar problem here.  Many spam go through
> undetected.  I think that the spammers use many new servers, and RBLs
> are slow to respond.
> 
> Ugo

FYI
Top 20 rule hits over the last 5 days are as following..

URIBL_BLACK 	
BAYES_99 	
URIBL_JP_SURBL 	
URIBL_WS_SURBL 	
URIBL_OB_SURBL 	
URIBL_SC2_SURBL 	
RCVD_IN_BL_SPAMCOP_NET 	
URIBL_SC_SURBL 	
URIBL_AB_SURBL 	
HTML_MESSAGE
URIBL_SBL 	
URIBL_XS_SURBL 	
MIME_HTML_ONLY 	
MSGID_DOLLARS 	
BAYES_00 	
DBL_12_LETTER_FLDR 	
HTML_90_100 	

Note the large number of URI-RBL hits......IMHO these are the best 
defense against spam right now and are very quick to update..

-- 
--
Martin Hepworth
Senior Systems Administrator
Solid State Logic Ltd
tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!