spamhaus-XBL

[Pete Russell]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jason, almost none of us use the Spam Lists in mailscanner.conf, we do
it in SA, as outlined by martin.

ANd i find that all of the RBLS, and razor have a lot of the major
Aussie isps IP ranges listed now, its has been fairly furstating lately.

Jason wrote:
> Hi Drew,
>
> In fact, this spamhaus-XBL has detected serveral messages that are
> missed by
> spamassassin (not enough score). So if Frank's suggestion do work, I would
> give it a try. If it doesn't, I would surely use spamassassin only. False
> positive is alway troublesome.
>
> Jason
>
> ----- Original Message -----
> From: "Drew Marshall" <drew at THEMARSHALLS.CO.UK>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Tuesday, March 15, 2005 5:33 PM
> Subject: Re: spamhaus-XBL
>
>
>> Frank Louwers said:
>>
>>> On Tue, Mar 15, 2005 at 09:18:32AM -0000, Drew Marshall wrote:
>>>
>>>> Jason said:
>>>> > Hi,
>>>> >
>>>> >     But 219.132.219.6 is the client (outlook express), not the email
>>>> > server.
>>>> > The client is sending email through the server by smtp auth.
>>>> >
>>>> > Jason
>>>>
>>>> That won't make any difference. The client is establishing a SMTP
>>>> connection to the server and so it's IP address will be checked.
>>>> Spammers
>>>> will often fake the client so all SMTP connections have to be checked.
>>>
>>>
>>> Not realy. You should run auth-smtp on a different port (tcp/587) and
>>> ONLY run auth-smtp on that port, no regular smtp. That way, you can
>>> configure the MTA on 587 not to do special checks (blacklist checks).
>>
>>
>> But the mail is not being bounced but tagged as spam in MS. If the RBL
>> checks are set in MailScanner then messages from that IP address will
>> always be marked as spam. Better still as Martin suggested is to remove
>> all RBLs from MailScanner and let SpamAssassin check them. This won't
>> mean
>> that there isn't a chance that the message is tagged but it's less
>> likely.
>>
>> Drew
>>
>> --
>> In line with our policy, this message has
>> been scanned for viruses and dangerous
>> content by MailScanner, and is believed to be clean.
>> www.themarshalls.co.uk/policy
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!