spamaction highscore rules.

Fri May 15 11:54:29 IST 2009

Hi Kasper

It really isn’t hard at all to do user checking.

Instead of collecting the list of valid users via ldap or some sort of
export or other tedious methods. You can simply do callout from your mta.
Meaning your relay server (mailscanner) checks with the receiving smtp
server if it wants to accept the mail address.

Of course this requires that your customers mail servers reject unknown
users, but unless they use wildcard mail addresses this is no problem at
all.

Med venlig hilsen / Best regards

Jonas Akrouh Larsen

TechBiz ApS

Laplandsgade 4, 2. sal

2300 København S

Office: 7020 0979

Direct: 3336 9974

Mobile: 5120 1096

Fax:    7020 0978

Web:  <http://www.techbiz.dk> www.techbiz.dk

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Kasper
Sacharias Eenberg
Sent: 15. maj 2009 10:32
To: MailScanner discussion
Subject: Re: spamaction highscore rules.

Unfortunately, we do not, completely that is.

I implemented some user checking. But we have many mailservers running.
Lotus Domino, Microsoft Exchange, Zarafa and simply postfix/dovecot.
It's a pain gathering from that many servers.
It's on my todo list though.
I'll prioritize it up.

The main problem however, might be that the server only has 1GB of ram, for
some reason or other.
The other spamfilters have better hardware, but this is used as our primary,
until i set up replication of rules and such. And add more filters.

Tuning has been done on all servers.

With regards,

  _____  

Kasper Eenberg

HOVMARK DATA
Ravnevej 13   
dk-6705 Esbjerg Ø
tlf:   +45 76 12 59 04
mobil: +45 40 70 69 63 

On Fri, 2009-05-15 at 08:47 +0100, Martin Hepworth wrote:

Kasper 

I presume you do things like drop unknown users at the MTA? This can reduce
the load by well over 50%. Also have a look in the wiki about performance
tuning MailScanner - local caching nameserver, using only a few RBL's etc
etc. 

-- 

Martin

2009/5/15 Kasper Sacharias Eenberg <kse at hovmark.dk> 

Thanks for the help.

But i'm afraid this server is already way overloaded, and that this might
kill it.
Are there any alternatives to this? Any rules i can write?

Adding "To:             @eurocargoservices.dk delete" does not work, as you
say.

With regards, 

  _____  

Kasper Eenberg

HOVMARK DATA
Ravnevej 13   
dk-6705 Esbjerg Ø
tlf:   +45 76 12 59 04
mobil: +45 40 70 69 63 

On Wed, 2009-05-13 at 09:59 +0100, Martin Hepworth wrote: 

Best way to avoid this situation is split the email up into individual
recipients and then the rules on forwarding will work fine. The problem is
if the 'to' contains multiple recipients and gives conflicting actions eg
deliver and not-deliver which one should it obey???? MailScanner can't get
which one is correct so uses the Envelope-To: as the overriding value.

How to split the emails up is dependant on the MTA you use but sendmail,
Exim and Postfix are covered in the wiki
(http://wiki.mailscanner.info/doku.php?id=
<http://wiki.mailscanner.info/doku.php?id=&idx=documentation:configuration:m
ta> &idx=documentation:configuration:mta)

-- 
Martin Hepworth
Oxford, UK

2009/5/13 Kasper Sacharias Eenberg <kse at hovmark.dk>

So, i embarassed myself to my company yesterday.

I managed to write a highscore rule that passed on all spam mails, that it
should be dropping.
But nevermind that.

My problem is, i have two domains.
eurocargoservices.de
eurocargoservices.dk

The .de company wants to receive all spam mails. They receive alot of mails
from China and russia, which normally get tagged as spam (Since i took over
the filter it now work quite well though, ignoring them).

However, som spam mails are sent with both the .de and .dk domain in the
'to' header.
And when the .de domain is in the recipient, the rule that delivers mail to
.de takes action, and the spam is delivered to the .dk.

It seems "Use Default Rules With Multiple Recipients = yes" does not work.

These are the rules:
To:             @eurocargoservices.de deliver
FromOrTo:       default         forward isspam at localhost

Live long and prosper,

  _____  

Kasper Eenberg

HOVMARK DATA
Ravnevej 13   
dk-6705 Esbjerg Ø
tlf:   +45 76 12 59 04
mobil: +45 40 70 69 63 

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

-- 
Martin Hepworth
Oxford, UK

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090515/527adb99/attachment-0001.html