spam-

[Tracy Greggs]

I 2nd that!  Very few false positives with Barracuda in my experience.

 

You can also look at what IS being scored in SA on these spams and perhaps
increase the score for some of the items.  My personal opinion is that the
default SA score is too low for quite a few of the rules.

 

Razor, Pyzor and DCC?  They are a must IMO.  It truly is a balancing act and
you are NEVER going to stop all spam from getting through, but you can catch
the vast majority of it with some diligence.

 

I am personally a proponent of using geoip blocking with xtables addon for
iptables and blocking all of the major offending countries that I never have
legit email from.  I do understand for the global corporate scenario that is
largely not possible to do.

 

Tracy Greggs

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Terry Hulen
Jr
Sent: Friday, November 08, 2013 10:34 AM
To: MailScanner discussion
Subject: Re: spam-

 

The first thing I would do is use your MTA to use the most common BL sites.
If you follow this link you will notice that the first IP that you sent is
listed on many BL databases:

http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a178.76.217.156
<http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a178.76.217.156&run=t
oolpage> &run=toolpage

I would at least use Barracuda's BL database to block these at the MTA.

 

On Fri, Nov 8, 2013 at 11:18 AM, Mark Sapiro <mark at msapiro.net> wrote:

On 11/08/2013 07:39 AM, Ejaz wrote:
> In my Mailscanner.conf the default score was set to 6, now I have
> reduced to 5. But fears is that some false positive can happen.



Spam detection is not an exact science. There will always be false
positives, false negatives or both.

Make sure your SpamAssassin rules are up to date and maybe try adding
some additional rules.

See <http://www.mailscanner.info/gettingthebest.html>

--
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

 


-- 
This message has been scanned for viruses and 
dangerous content by  <http://www.mailscanner.info/> MailScanner, and is 
believed to be clean. 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20131108/7fb6f0e1/attachment.html