From max at inmindlabs.com Fri Jul 4 15:10:52 2014 From: max at inmindlabs.com (Max Kipness) Date: Fri, 4 Jul 2014 09:10:52 -0500 Subject: Live scoring vs. Test scoring Message-ID: <11375BD8FE838A409E10DB32B9BFFE9B9E70A3@addc01.assuredata.local> Good morning Guys, I've noticed something that I'm a bit puzzled about. Today I was testing a spam message that got through with a low score. It's one of those with a subject as ???????? and all it had was a very large attachment. Well when it passed through MailScanner the first time, it received the following score: score=1.911 required 4.5 BAYES_50 0.80 DCC_CHECK 1.10 HTML_MESSAGE 0.00 T_OBFU_PDF_ATTACH 0.01 Not sure why the bayes was so low as bayes is pretty much 99% accurate at this point, but the real question is that when I ran it through SpamAssassin again, it several other rules. I understand it could hit other databases like Pyzor and get listed after I received my copy. However, shouldn't the TVD_FW_GRAPHIC_NAME_LONG BODY, SARE_GIF_ATTACH and DIET_SPAM, etc have hit the first time? Am I missing something? Overall my accuracy is really high, but just curious about this issue. Content analysis details: (7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.3 TVD_FW_GRAPHIC_NAME_LONG BODY: Long image attachment name 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.4576] 0.0 T_OBFU_PDF_ATTACH BODY: PDF attachment with generic MIME type 0.2 DIET_SPAM FULL: DIET_SPAM 1.4 SARE_GIF_ATTACH FULL: Email has a inline gif 1.1 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net) 1.4 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) 0.3 DIGEST_MULTIPLE Message hits more than one network digest check 2.2 SB_GIF_AND_NO_URIS SB_GIF_AND_NO_URIS -1.1 AWL AWL: From: address is in the auto white-list Thanks, Max From chris at techquility.net Wed Jul 9 15:13:28 2014 From: chris at techquility.net (Chris Barber) Date: Wed, 9 Jul 2014 14:13:28 +0000 Subject: White list issue Message-ID: <185ED33D2D4C2743B00271D65FB2B79A264B4568@SBS2011.techquility.local> Hi All, We have the latest MailScanner and Mailwatch combo running on CentOS. Has been working fine for a long time. We have a couple of users who are receiving spam and it shows as white listed in the Mailwatch interface. However, the email address nor the domain are on the white list at all. Has anyone seen this behavior? I am at a loss. Thanks! Chris From Antony.Stone at mailscanner.open.source.it Wed Jul 9 16:05:48 2014 From: Antony.Stone at mailscanner.open.source.it (Antony Stone) Date: Wed, 9 Jul 2014 17:05:48 +0200 Subject: White list issue In-Reply-To: <185ED33D2D4C2743B00271D65FB2B79A264B4568@SBS2011.techquility.local> References: <185ED33D2D4C2743B00271D65FB2B79A264B4568@SBS2011.techquility.local> Message-ID: <201407091705.49027.Antony.Stone@mailscanner.open.source.it> On Wednesday 09 July 2014 at 16:13:28, Chris Barber wrote: > Hi All, > > We have the latest MailScanner and Mailwatch combo running on CentOS. Has > been working fine for a long time. We have a couple of users who are > receiving spam and it shows as white listed in the Mailwatch interface. > However, the email address nor the domain are on the white list at all. > > Has anyone seen this behavior? I am at a loss. Is the sending server whitelisted (ie: the next-hop machine which is directly communicating with yours)? Antony. -- "Black holes are where God divided by zero." - Steven Wright Please reply to the list; please *don't* CC me. From alex at vidadigital.com.pa Wed Jul 9 16:30:50 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Wed, 9 Jul 2014 10:30:50 -0500 Subject: White list issue In-Reply-To: <185ED33D2D4C2743B00271D65FB2B79A264B4568@SBS2011.techquility.local> References: <185ED33D2D4C2743B00271D65FB2B79A264B4568@SBS2011.techquility.local> Message-ID: I've only seen this behavior when the whitelisting "hits" a rule that you're not seeing, even though it's there - such as IP address, for example. Also, when a message is sent TO: a whitelisted user, everybody else in the message gets it. Example: From: spammer at douchebag.com To: johndoe at victim.com (whitelisted) CC: Spamhater at victim.com (not whitelisted) Unless you "split messages per recipient" (something that depends on your MTA), since To: johndoe at victim.com is whitelisted or since From:spammer at douchebag.com and To:johndoe at victim.com is whitelisted or From: douchebag.com and To: (you get the picture) spamhater@ gets a copy. *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Wed, Jul 9, 2014 at 9:13 AM, Chris Barber wrote: > Hi All, > > We have the latest MailScanner and Mailwatch combo running on CentOS. Has > been working fine for a long time. We have a couple of users who are > receiving spam and it shows as white listed in the Mailwatch interface. > However, the email address nor the domain are on the white list at all. > > Has anyone seen this behavior? I am at a loss. > > Thanks! > Chris > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140709/c6ca7673/attachment.html From chris at techquility.net Wed Jul 9 19:11:21 2014 From: chris at techquility.net (Chris Barber) Date: Wed, 9 Jul 2014 18:11:21 +0000 Subject: White list issue In-Reply-To: <201407091705.49027.Antony.Stone@mailscanner.open.source.it> References: <185ED33D2D4C2743B00271D65FB2B79A264B4568@SBS2011.techquility.local> <201407091705.49027.Antony.Stone@mailscanner.open.source.it> Message-ID: <185ED33D2D4C2743B00271D65FB2B79A264B68FA@SBS2011.techquility.local> -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Antony Stone Sent: Wednesday, July 9, 2014 11:06 AM To: MailScanner discussion Subject: Re: White list issue On Wednesday 09 July 2014 at 16:13:28, Chris Barber wrote: > Hi All, > > We have the latest MailScanner and Mailwatch combo running on CentOS. > Has been working fine for a long time. We have a couple of users who > are receiving spam and it shows as white listed in the Mailwatch interface. > However, the email address nor the domain are on the white list at all. > > Has anyone seen this behavior? I am at a loss. Is the sending server whitelisted (ie: the next-hop machine which is directly communicating with yours)? Antony. -- "Black holes are where God divided by zero." - Steven Wright Please reply to the list; please *don't* CC me. Thanks, that was it. Found the secondary MX IP on the whitelist for the users domain. Thanks agian From samg at synaq.com Fri Jul 11 09:51:06 2014 From: samg at synaq.com (Sam Gelbart) Date: Fri, 11 Jul 2014 10:51:06 +0200 (SAST) Subject: MailScanner Deficiency: Multi-Ruleset Processing per Email Recipient In-Reply-To: <420555643.4765193.1404800631730.JavaMail.zimbra@synaq.com> Message-ID: <1584711497.1243983.1405068666892.JavaMail.zimbra@synaq.com> Hi All, We at SYNAQ use and have used Mailscanner for many years. As an Email Hygiene provider MailScanner has served us very well. However, as we have grown (very rapidly in the past 6 months, to many more customer domains) we have noticed some deficiencies in MailScanner. Below is a brief description covering our problem areas: Overview The issue has arisen due to SYNAQ's ever growing client base and the fact that we're provisioning more and more customers (and email domains) on our hygiene platform, and that more than one of these customer recipients/domains (and their applicable rulesets) are being addressed in the same email. Problem 1 1) abc.co.za and xyz.co.za are both provisioned on our platform. 2) abc.co.za has quarantining of SPAM configured, while xyz.co.za does not. 3) Mailscanner accepts the message for processing but "chooses" user at abc.co.za and abc.co.za as the Message's "to_address" and "to_domain". 4) MailScanner determines that the message is SPAM and because it has "chosen" @abc.co.za as the email domain it deletes the message as the configured spam action for @abc.coz.a is to delete. 5) However the rule for xyz.co.za is to store/quarantine spam. This does not happen because of the actions above and data is also never logged via MailWatch. 6) The example above is a based on very simple scenario, and as you are aware this applies to many more complex rulesets (size, File Type etc) across the system. Problem 2 1) abc.co.za and xyz.co.za are both provisioned on our platform. 2) A third party emails both user at abc.co.za and user at xyz.co.za in a single email message. 3) Mailscanner accepts the message for processing but "chooses" user at abc.co.za and abc.co.za as the Message's "to_address" and "to_domain". 4) When the message is processed, the MailWatch.pm script receives a message object for SQL logging with data only for user at abc.co.za and abc.co.za; xyz.co.za is never logged. Finally we have considered splitting incoming messages by recipient at an MTA level to address this problem, but our calculations show that it would require 3.5x more hardware to process this increased mail load. So for us a MailsScanner solution is ideal. Based on the above, could you tell me if there is anything that can be done from a MailScanner community point of view to help develop MailScanner functionality to address these issues? We'd be very happy to give a nice donation for a fix or patch. Also if the community has any ideas on other ways we can remedy this problem we welcome your feedback. Thanks and regards, Sam Gelbart SYNAQ From alex at vidadigital.com.pa Fri Jul 11 13:37:36 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Fri, 11 Jul 2014 07:37:36 -0500 Subject: MailScanner Deficiency: Multi-Ruleset Processing per Email Recipient In-Reply-To: <1584711497.1243983.1405068666892.JavaMail.zimbra@synaq.com> References: <420555643.4765193.1404800631730.JavaMail.zimbra@synaq.com> <1584711497.1243983.1405068666892.JavaMail.zimbra@synaq.com> Message-ID: This has been discussed many times before. You need to split recipients at the MTA level in order to accomplish this, unless you can contribute the resources to modify the code. You could use less than 3.5x the hardware by using a gateway machine to do the splitting for you. I don't know what your mail volume is, but I'm guessing just for splitting and relaying you could get by with using SSD's for the relay machine and for the MailScanner incoming and processing queue folders - with the end result probably being faster than what you have now, at least from experience. *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Fri, Jul 11, 2014 at 3:51 AM, Sam Gelbart wrote: > Hi All, > > We at SYNAQ use and have used Mailscanner for many years. As an Email > Hygiene provider MailScanner has served us very well. > However, as we have grown (very rapidly in the past 6 months, to many more > customer domains) we have noticed some deficiencies in MailScanner. > > Below is a brief description covering our problem areas: > > Overview > The issue has arisen due to SYNAQ's ever growing client base and the fact > that we're provisioning more and more customers (and email domains) on our > hygiene platform, and that more than one of these customer > recipients/domains (and their applicable rulesets) are being addressed in > the same email. > > Problem 1 > 1) abc.co.za and xyz.co.za are both provisioned on our platform. > 2) abc.co.za has quarantining of SPAM configured, while xyz.co.za does > not. > 3) Mailscanner accepts the message for processing but "chooses" > user at abc.co.za and abc.co.za as the Message's "to_address" and > "to_domain". > 4) MailScanner determines that the message is SPAM and because it has > "chosen" @abc.co.za as the email domain it deletes the message as the > configured spam action for @abc.coz.a is to delete. > 5) However the rule for xyz.co.za is to store/quarantine spam. This does > not happen because of the actions above and data is also never logged via > MailWatch. > 6) The example above is a based on very simple scenario, and as you are > aware this applies to many more complex rulesets (size, File Type etc) > across the system. > > Problem 2 > 1) abc.co.za and xyz.co.za are both provisioned on our platform. > 2) A third party emails both user at abc.co.za and user at xyz.co.za in a > single email message. > 3) Mailscanner accepts the message for processing but "chooses" > user at abc.co.za and abc.co.za as the Message's "to_address" and > "to_domain". > 4) When the message is processed, the MailWatch.pm script receives a > message object for SQL logging with data only for user at abc.co.za and > abc.co.za; xyz.co.za is never logged. > > Finally we have considered splitting incoming messages by recipient at an > MTA level to address this problem, but our calculations show that it would > require 3.5x more hardware to process this increased mail load. So for us a > MailsScanner solution is ideal. > > Based on the above, could you tell me if there is anything that can be > done from a MailScanner community point of view to help develop MailScanner > functionality to address these issues? > We'd be very happy to give a nice donation for a fix or patch. > > Also if the community has any ideas on other ways we can remedy this > problem we welcome your feedback. > > Thanks and regards, > > Sam Gelbart > SYNAQ > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140711/db696b3a/attachment.html From maxsec at gmail.com Fri Jul 11 14:49:04 2014 From: maxsec at gmail.com (Martin Hepworth) Date: Fri, 11 Jul 2014 14:49:04 +0100 Subject: MailScanner Deficiency: Multi-Ruleset Processing per Email Recipient In-Reply-To: <1584711497.1243983.1405068666892.JavaMail.zimbra@synaq.com> References: <420555643.4765193.1404800631730.JavaMail.zimbra@synaq.com> <1584711497.1243983.1405068666892.JavaMail.zimbra@synaq.com> Message-ID: Might want to also consider having a more flexible approach as Alex had mentioned. Will also help with some of the hardware requirements as you can also reject non-valid recipients at MTA as well as splitting the emails up, so the core MailScanner farm has less to do. -- Martin Hepworth, CISSP Oxford, UK On 11 July 2014 09:51, Sam Gelbart wrote: > Hi All, > > We at SYNAQ use and have used Mailscanner for many years. As an Email > Hygiene provider MailScanner has served us very well. > However, as we have grown (very rapidly in the past 6 months, to many more > customer domains) we have noticed some deficiencies in MailScanner. > > Below is a brief description covering our problem areas: > > Overview > The issue has arisen due to SYNAQ's ever growing client base and the fact > that we're provisioning more and more customers (and email domains) on our > hygiene platform, and that more than one of these customer > recipients/domains (and their applicable rulesets) are being addressed in > the same email. > > Problem 1 > 1) abc.co.za and xyz.co.za are both provisioned on our platform. > 2) abc.co.za has quarantining of SPAM configured, while xyz.co.za does > not. > 3) Mailscanner accepts the message for processing but "chooses" > user at abc.co.za and abc.co.za as the Message's "to_address" and > "to_domain". > 4) MailScanner determines that the message is SPAM and because it has > "chosen" @abc.co.za as the email domain it deletes the message as the > configured spam action for @abc.coz.a is to delete. > 5) However the rule for xyz.co.za is to store/quarantine spam. This does > not happen because of the actions above and data is also never logged via > MailWatch. > 6) The example above is a based on very simple scenario, and as you are > aware this applies to many more complex rulesets (size, File Type etc) > across the system. > > Problem 2 > 1) abc.co.za and xyz.co.za are both provisioned on our platform. > 2) A third party emails both user at abc.co.za and user at xyz.co.za in a > single email message. > 3) Mailscanner accepts the message for processing but "chooses" > user at abc.co.za and abc.co.za as the Message's "to_address" and > "to_domain". > 4) When the message is processed, the MailWatch.pm script receives a > message object for SQL logging with data only for user at abc.co.za and > abc.co.za; xyz.co.za is never logged. > > Finally we have considered splitting incoming messages by recipient at an > MTA level to address this problem, but our calculations show that it would > require 3.5x more hardware to process this increased mail load. So for us a > MailsScanner solution is ideal. > > Based on the above, could you tell me if there is anything that can be > done from a MailScanner community point of view to help develop MailScanner > functionality to address these issues? > We'd be very happy to give a nice donation for a fix or patch. > > Also if the community has any ideas on other ways we can remedy this > problem we welcome your feedback. > > Thanks and regards, > > Sam Gelbart > SYNAQ > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140711/7580c8fe/attachment.html From it at festa.bg Thu Jul 17 12:24:13 2014 From: it at festa.bg (Valentin Laskov) Date: Thu, 17 Jul 2014 14:24:13 +0300 Subject: Spam rules Message-ID: <7B37A216310B457A818B8DB2FDAF7471@festa.bg> Hi all! I'm receiving spam from (for ex.) someone at somewhere.com . I set this in my spam.blacklist.rules: From: someone at somewhere.com yes but this does not work because someone at somewhere.com is not From: address but Replay To: address in the letters headers. From: address changes frequently. How can I mark this as spam ? Regards! Valentin Laskov From Denis.Beauchemin at usherbrooke.ca Thu Jul 17 13:21:40 2014 From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin) Date: Thu, 17 Jul 2014 12:21:40 +0000 Subject: Spam rules In-Reply-To: <7B37A216310B457A818B8DB2FDAF7471@festa.bg> References: <7B37A216310B457A818B8DB2FDAF7471@festa.bg> Message-ID: Valentin, Create a SpamAssassin rule in /etc/MailScanner/spam.assassin.prefs.conf: Describe MYRULE01 Reply To: someone at somewhere.com Header MYRULE01 ALL =~ /\bsomeone\@somewhere\.com\b/i Score MYRULE01 10 Denis -----Message d'origine----- De?: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] De la part de Valentin Laskov Envoy??: 17 juillet 2014 07:35 ??: MailScanner discussion Objet?: Spam rules Hi all! I'm receiving spam from (for ex.) someone at somewhere.com . I set this in my spam.blacklist.rules: From: someone at somewhere.com yes but this does not work because someone at somewhere.com is not From: address but Replay To: address in the letters headers. From: address changes frequently. How can I mark this as spam ? Regards! Valentin Laskov -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Denis.Beauchemin at usherbrooke.ca Thu Jul 17 13:38:02 2014 From: Denis.Beauchemin at usherbrooke.ca (Denis Beauchemin) Date: Thu, 17 Jul 2014 12:38:02 +0000 Subject: Spam rules In-Reply-To: References: <7B37A216310B457A818B8DB2FDAF7471@festa.bg> Message-ID: This should have gone on separate lines: Describe MYRULE01 Reply To: someone at somewhere.com Header MYRULE01 ALL =~ /\bsomeone\@somewhere\.com\b/i Score MYRULE01 10 Denis -----Message d'origine----- De?: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] De la part de Valentin Laskov Envoy??: 17 juillet 2014 07:35 ??: MailScanner discussion Objet?: Spam rules Hi all! I'm receiving spam from (for ex.) someone at somewhere.com . I set this in my spam.blacklist.rules: From: someone at somewhere.com yes but this does not work because someone at somewhere.com is not From: address but Replay To: address in the letters headers. From: address changes frequently. How can I mark this as spam ? Regards! Valentin Laskov -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From Bryan.Laurila at dchs.org Fri Jul 18 18:47:29 2014 From: Bryan.Laurila at dchs.org (Bryan Laurila) Date: Fri, 18 Jul 2014 12:47:29 -0500 Subject: Blocking top-level domains Message-ID: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> I had an interesting situation creep up on me this week where I thought that something was happening (or being processed) in MailScanner/SpamAssassin but apparently it was not. I have two mail relay scanners running MailScanner & SpamAssassin on Suse Linux. These boxes scan incoming mail for spam & viruses and then relay to my MS Exchange server. I had an influx of spam this week coming in from several top-level domains that we wouldn't normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. Upon investigating the situation I found that the Trend Micro Scan Mail service on my Exchange server crashed which lead me to the discovery that MailScanner & SpamAssassin weren't filtering mail from these unwanted top level domains as I thought and all that work was being done by my exchange server. So, the question of the day is... Where is the best place to turn on filtering or set a rule somehow to filter unwanted top-level domains at the MailScanner/SpamAssassin servers? Like all things in IT there are probably multiple ways of doing this so I am curious as to what others are doing. All thoughts & comments are welcome. Thanks! Bryan S. Laurila Senior Network Support Analyst Dickinson County Healthcare System 1721 South Stephenson Avenue Iron Mountain, Michigan 49801 "Life begins at the end of your comfort zone!" Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential. This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140718/97503038/attachment.html From mailscanner-list at okla.com Fri Jul 18 21:14:49 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Fri, 18 Jul 2014 15:14:49 -0500 Subject: Blocking top-level domains In-Reply-To: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> Message-ID: <00bb01cfa2c4$f2347e90$d69d7bb0$@okla.com> How about hosts.deny Tracy From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Bryan Laurila Sent: Friday, July 18, 2014 12:47 PM To: mailscanner at lists.mailscanner.info Subject: Blocking top-level domains I had an interesting situation creep up on me this week where I thought that something was happening (or being processed) in MailScanner/SpamAssassin but apparently it was not. I have two mail relay scanners running MailScanner & SpamAssassin on Suse Linux. These boxes scan incoming mail for spam & viruses and then relay to my MS Exchange server. I had an influx of spam this week coming in from several top-level domains that we wouldn't normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. Upon investigating the situation I found that the Trend Micro Scan Mail service on my Exchange server crashed which lead me to the discovery that MailScanner & SpamAssassin weren't filtering mail from these unwanted top level domains as I thought and all that work was being done by my exchange server. So, the question of the day is. Where is the best place to turn on filtering or set a rule somehow to filter unwanted top-level domains at the MailScanner/SpamAssassin servers? Like all things in IT there are probably multiple ways of doing this so I am curious as to what others are doing. All thoughts & comments are welcome. Thanks! Bryan S. Laurila Senior Network Support Analyst Dickinson County Healthcare System 1721 South Stephenson Avenue Iron Mountain, Michigan 49801 "Life begins at the end of your comfort zone!" -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential. This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140718/f44997fb/attachment.html From Kevin_Miller at ci.juneau.ak.us Fri Jul 18 22:26:59 2014 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Fri, 18 Jul 2014 13:26:59 -0800 Subject: Blocking top-level domains In-Reply-To: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> Message-ID: I'd put them in the sendmail access file. ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357 From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Bryan Laurila Sent: Friday, July 18, 2014 9:47 AM To: mailscanner at lists.mailscanner.info Subject: Blocking top-level domains I had an interesting situation creep up on me this week where I thought that something was happening (or being processed) in MailScanner/SpamAssassin but apparently it was not. I have two mail relay scanners running MailScanner & SpamAssassin on Suse Linux. These boxes scan incoming mail for spam & viruses and then relay to my MS Exchange server. I had an influx of spam this week coming in from several top-level domains that we wouldn't normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. Upon investigating the situation I found that the Trend Micro Scan Mail service on my Exchange server crashed which lead me to the discovery that MailScanner & SpamAssassin weren't filtering mail from these unwanted top level domains as I thought and all that work was being done by my exchange server. So, the question of the day is... Where is the best place to turn on filtering or set a rule somehow to filter unwanted top-level domains at the MailScanner/SpamAssassin servers? Like all things in IT there are probably multiple ways of doing this so I am curious as to what others are doing. All thoughts & comments are welcome. Thanks! Bryan S. Laurila Senior Network Support Analyst Dickinson County Healthcare System 1721 South Stephenson Avenue Iron Mountain, Michigan 49801 "Life begins at the end of your comfort zone!" Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential. This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140718/1bebf54b/attachment.html From rcooper at dwford.com Fri Jul 18 23:01:18 2014 From: rcooper at dwford.com (Rick Cooper) Date: Fri, 18 Jul 2014 18:01:18 -0400 Subject: Blocking top-level domains In-Reply-To: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> Message-ID: I agree with Tracy and Kevin. I block those tlds that I don't ever need to connect at exim level, what is the point of recieving the mail, sending it to MailScanner and then discarding it after all that work? _____ From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Bryan Laurila Sent: Friday, July 18, 2014 1:47 PM To: mailscanner at lists.mailscanner.info Subject: Blocking top-level domains I had an interesting situation creep up on me this week where I thought that something was happening (or being processed) in MailScanner/SpamAssassin but apparently it was not. I have two mail relay scanners running MailScanner & SpamAssassin on Suse Linux. These boxes scan incoming mail for spam & viruses and then relay to my MS Exchange server. I had an influx of spam this week coming in from several top-level domains that we wouldn't normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. Upon investigating the situation I found that the Trend Micro Scan Mail service on my Exchange server crashed which lead me to the discovery that MailScanner & SpamAssassin weren't filtering mail from these unwanted top level domains as I thought and all that work was being done by my exchange server. So, the question of the day is. Where is the best place to turn on filtering or set a rule somehow to filter unwanted top-level domains at the MailScanner/SpamAssassin servers? Like all things in IT there are probably multiple ways of doing this so I am curious as to what others are doing. All thoughts & comments are welcome. Thanks! Bryan S. Laurila Senior Network Support Analyst Dickinson County Healthcare System 1721 South Stephenson Avenue Iron Mountain, Michigan 49801 "Life begins at the end of your comfort zone!" Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential. This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140718/ee667e5a/attachment.html From mailscanner-list at okla.com Sat Jul 19 00:03:14 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Fri, 18 Jul 2014 18:03:14 -0500 Subject: Blocking top-level domains In-Reply-To: References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> Message-ID: <00e401cfa2dc$78179530$6846bf90$@okla.com> Personally, I use iptables with xtables-addons to block countries that I have no legit email from ever as well. I know a lot of people disagree with that but it works great for me. I also use hosts.deny and rbldnsd Rbldnsd comes in particularly handy to stop netblocks from hosting providers that are super spam friendly and never respond to abuse complaints. Between all of that I can keep things running 90% clean on avg. Just my 2 cents J Tracy From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Rick Cooper Sent: Friday, July 18, 2014 5:01 PM To: 'MailScanner discussion' Subject: RE: Blocking top-level domains I agree with Tracy and Kevin. I block those tlds that I don't ever need to connect at exim level, what is the point of recieving the mail, sending it to MailScanner and then discarding it after all that work? _____ From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Bryan Laurila Sent: Friday, July 18, 2014 1:47 PM To: mailscanner at lists.mailscanner.info Subject: Blocking top-level domains I had an interesting situation creep up on me this week where I thought that something was happening (or being processed) in MailScanner/SpamAssassin but apparently it was not. I have two mail relay scanners running MailScanner & SpamAssassin on Suse Linux. These boxes scan incoming mail for spam & viruses and then relay to my MS Exchange server. I had an influx of spam this week coming in from several top-level domains that we wouldn't normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. Upon investigating the situation I found that the Trend Micro Scan Mail service on my Exchange server crashed which lead me to the discovery that MailScanner & SpamAssassin weren't filtering mail from these unwanted top level domains as I thought and all that work was being done by my exchange server. So, the question of the day is. Where is the best place to turn on filtering or set a rule somehow to filter unwanted top-level domains at the MailScanner/SpamAssassin servers? Like all things in IT there are probably multiple ways of doing this so I am curious as to what others are doing. All thoughts & comments are welcome. Thanks! Bryan S. Laurila Senior Network Support Analyst Dickinson County Healthcare System 1721 South Stephenson Avenue Iron Mountain, Michigan 49801 "Life begins at the end of your comfort zone!" Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential. This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140718/c78ffdce/attachment.html From mogens at fumlersoft.dk Sat Jul 19 06:38:16 2014 From: mogens at fumlersoft.dk (Mogens Melander) Date: Sat, 19 Jul 2014 07:38:16 +0200 (CEST) Subject: Blocking top-level domains In-Reply-To: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> Message-ID: <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> Hi I'm doing stuff like that in sendmail's access (/etc/mail/access) file, with entries like: cn.ru ERROR:"550 Reject : cn.ru - Spam source" Works like a charm :) On Fri, July 18, 2014 19:47, Bryan Laurila wrote: > I had an interesting situation creep up on me this week where I thought > that something was happening (or being processed) in > MailScanner/SpamAssassin but apparently it was not. > > I have two mail relay scanners running MailScanner & SpamAssassin on > Suse Linux. These boxes scan incoming mail for spam & viruses and then > relay to my MS Exchange server. I had an influx of spam this week > coming in from several top-level domains that we wouldn't normally > receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. > > > Upon investigating the situation I found that the Trend Micro Scan Mail > service on my Exchange server crashed which lead me to the discovery > that MailScanner & SpamAssassin weren't filtering mail from these > unwanted top level domains as I thought and all that work was being done > by my exchange server. > > So, the question of the day is... Where is the best place to turn on > filtering or set a rule somehow to filter unwanted top-level domains at > the MailScanner/SpamAssassin servers? > > Like all things in IT there are probably multiple ways of doing this so > I am curious as to what others are doing. All thoughts & comments are > welcome. > > Thanks! > > Bryan S. Laurila > Senior Network Support Analyst > Dickinson County Healthcare System > 1721 South Stephenson Avenue > Iron Mountain, Michigan 49801 > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From Bryan.Laurila at dchs.org Mon Jul 21 22:47:25 2014 From: Bryan.Laurila at dchs.org (Bryan Laurila) Date: Mon, 21 Jul 2014 16:47:25 -0500 Subject: Blocking top-level domains In-Reply-To: <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> Message-ID: <462D865B978B49479822BC40268BCC820D4A8301@mail.dchs.local> I like this but I forgot to mention in my original post that I am running postfix. How would I configure something like this using postfix? Thanks, Bryan Bryan S. Laurila Senior Network Support Analyst Dickinson County Healthcare System -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander Sent: Saturday, July 19, 2014 12:38 AM To: mailscanner at lists.mailscanner.info Subject: Re: Blocking top-level domains Hi I'm doing stuff like that in sendmail's access (/etc/mail/access) file, with entries like: cn.ru ERROR:"550 Reject : cn.ru - Spam source" Works like a charm :) On Fri, July 18, 2014 19:47, Bryan Laurila wrote: > I had an interesting situation creep up on me this week where I > thought that something was happening (or being processed) in > MailScanner/SpamAssassin but apparently it was not. > > I have two mail relay scanners running MailScanner & SpamAssassin on > Suse Linux. These boxes scan incoming mail for spam & viruses and > then relay to my MS Exchange server. I had an influx of spam this > week coming in from several top-level domains that we wouldn't > normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. > > > Upon investigating the situation I found that the Trend Micro Scan > Mail service on my Exchange server crashed which lead me to the > discovery that MailScanner & SpamAssassin weren't filtering mail from > these unwanted top level domains as I thought and all that work was > being done by my exchange server. > > So, the question of the day is... Where is the best place to turn on > filtering or set a rule somehow to filter unwanted top-level domains > at the MailScanner/SpamAssassin servers? > > Like all things in IT there are probably multiple ways of doing this > so I am curious as to what others are doing. All thoughts & comments > are welcome. > > Thanks! > > Bryan S. Laurila > Senior Network Support Analyst > Dickinson County Healthcare System > 1721 South Stephenson Avenue > Iron Mountain, Michigan 49801 > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! Confidentiality Notice: This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential. This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org From chris at techquility.net Tue Jul 22 03:11:39 2014 From: chris at techquility.net (Chris Barber) Date: Tue, 22 Jul 2014 02:11:39 +0000 Subject: Blocking top-level domains In-Reply-To: <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> Message-ID: <185ED33D2D4C2743B00271D65FB2B79A2674518A@SBS2011.techquility.local> Ahh, brilliant! We are using postfix instead of sendmail, do you know what the correspoding file in Postfix is for this? Thanks! Chris -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander Sent: Saturday, July 19, 2014 1:38 AM To: mailscanner at lists.mailscanner.info Subject: Re: Blocking top-level domains Hi I'm doing stuff like that in sendmail's access (/etc/mail/access) file, with entries like: cn.ru ERROR:"550 Reject : cn.ru - Spam source" Works like a charm :) On Fri, July 18, 2014 19:47, Bryan Laurila wrote: > I had an interesting situation creep up on me this week where I > thought that something was happening (or being processed) in > MailScanner/SpamAssassin but apparently it was not. > > I have two mail relay scanners running MailScanner & SpamAssassin on > Suse Linux. These boxes scan incoming mail for spam & viruses and > then relay to my MS Exchange server. I had an influx of spam this > week coming in from several top-level domains that we wouldn't > normally receive any valid emails from anyway, like .eu, .in, .asia, .club, etc. > > > Upon investigating the situation I found that the Trend Micro Scan > Mail service on my Exchange server crashed which lead me to the > discovery that MailScanner & SpamAssassin weren't filtering mail from > these unwanted top level domains as I thought and all that work was > being done by my exchange server. > > So, the question of the day is... Where is the best place to turn on > filtering or set a rule somehow to filter unwanted top-level domains > at the MailScanner/SpamAssassin servers? > > Like all things in IT there are probably multiple ways of doing this > so I am curious as to what others are doing. All thoughts & comments > are welcome. > > Thanks! > > Bryan S. Laurila > Senior Network Support Analyst > Dickinson County Healthcare System > 1721 South Stephenson Avenue > Iron Mountain, Michigan 49801 > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From joh.hendriks at gmail.com Tue Jul 22 06:24:53 2014 From: joh.hendriks at gmail.com (Johan Hendriks) Date: Tue, 22 Jul 2014 07:24:53 +0200 Subject: Blocking top-level domains In-Reply-To: <185ED33D2D4C2743B00271D65FB2B79A2674518A@SBS2011.techquility.local> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> <185ED33D2D4C2743B00271D65FB2B79A2674518A@SBS2011.techquility.local> Message-ID: Ik you use Google and Google for the following you get enough results that you can use. postfix block toplevel domain Regards Op 22 jul. 2014 04:39 schreef "Chris Barber" : > Ahh, brilliant! We are using postfix instead of sendmail, do you know what > the correspoding file in Postfix is for this? > > Thanks! > Chris > > > -----Original Message----- > From: mailscanner-bounces at lists.mailscanner.info [mailto: > mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander > Sent: Saturday, July 19, 2014 1:38 AM > To: mailscanner at lists.mailscanner.info > Subject: Re: Blocking top-level domains > > Hi > > I'm doing stuff like that in sendmail's access (/etc/mail/access) file, > with entries like: > > cn.ru ERROR:"550 Reject : cn.ru - Spam source" > > Works like a charm :) > > On Fri, July 18, 2014 19:47, Bryan Laurila wrote: > > I had an interesting situation creep up on me this week where I > > thought that something was happening (or being processed) in > > MailScanner/SpamAssassin but apparently it was not. > > > > I have two mail relay scanners running MailScanner & SpamAssassin on > > Suse Linux. These boxes scan incoming mail for spam & viruses and > > then relay to my MS Exchange server. I had an influx of spam this > > week coming in from several top-level domains that we wouldn't > > normally receive any valid emails from anyway, like .eu, .in, .asia, > .club, etc. > > > > > > Upon investigating the situation I found that the Trend Micro Scan > > Mail service on my Exchange server crashed which lead me to the > > discovery that MailScanner & SpamAssassin weren't filtering mail from > > these unwanted top level domains as I thought and all that work was > > being done by my exchange server. > > > > So, the question of the day is... Where is the best place to turn on > > filtering or set a rule somehow to filter unwanted top-level domains > > at the MailScanner/SpamAssassin servers? > > > > Like all things in IT there are probably multiple ways of doing this > > so I am curious as to what others are doing. All thoughts & comments > > are welcome. > > > > Thanks! > > > > Bryan S. Laurila > > Senior Network Support Analyst > > Dickinson County Healthcare System > > 1721 South Stephenson Avenue > > Iron Mountain, Michigan 49801 > > > > > -- > Mogens Melander > +66 8701 33224 > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140722/e5a3d304/attachment.html From mogens at fumlersoft.dk Tue Jul 22 08:25:15 2014 From: mogens at fumlersoft.dk (Mogens Melander) Date: Tue, 22 Jul 2014 09:25:15 +0200 (CEST) Subject: Blocking top-level domains In-Reply-To: <185ED33D2D4C2743B00271D65FB2B79A2674518A@SBS2011.techquility.local> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> <185ED33D2D4C2743B00271D65FB2B79A2674518A@SBS2011.techquility.local> Message-ID: <2101.dfcd4929.1406013915.nsm@mail.fumlersoft.dk> Sorry, I don't. But google gave me this: http://www.postfix.org/access.5.html On Tue, July 22, 2014 04:11, Chris Barber wrote: > Ahh, brilliant! We are using postfix instead of sendmail, do you know what > the correspoding file in Postfix is for this? > > Thanks! > Chris > > > -----Original Message----- > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens > Melander > Sent: Saturday, July 19, 2014 1:38 AM > To: mailscanner at lists.mailscanner.info > Subject: Re: Blocking top-level domains > > Hi > > I'm doing stuff like that in sendmail's access (/etc/mail/access) file, > with entries like: > > cn.ru ERROR:"550 Reject : cn.ru - Spam source" > > Works like a charm :) > > On Fri, July 18, 2014 19:47, Bryan Laurila wrote: >> I had an interesting situation creep up on me this week where I >> thought that something was happening (or being processed) in >> MailScanner/SpamAssassin but apparently it was not. >> >> I have two mail relay scanners running MailScanner & SpamAssassin on >> Suse Linux. These boxes scan incoming mail for spam & viruses and >> then relay to my MS Exchange server. I had an influx of spam this >> week coming in from several top-level domains that we wouldn't >> normally receive any valid emails from anyway, like .eu, .in, .asia, >> .club, etc. >> >> >> Upon investigating the situation I found that the Trend Micro Scan >> Mail service on my Exchange server crashed which lead me to the >> discovery that MailScanner & SpamAssassin weren't filtering mail from >> these unwanted top level domains as I thought and all that work was >> being done by my exchange server. >> >> So, the question of the day is... Where is the best place to turn on >> filtering or set a rule somehow to filter unwanted top-level domains >> at the MailScanner/SpamAssassin servers? >> >> Like all things in IT there are probably multiple ways of doing this >> so I am curious as to what others are doing. All thoughts & comments >> are welcome. >> >> Thanks! >> >> Bryan S. Laurila >> Senior Network Support Analyst >> Dickinson County Healthcare System >> 1721 South Stephenson Avenue >> Iron Mountain, Michigan 49801 >> -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From nick.z.edwards at gmail.com Tue Jul 22 09:48:00 2014 From: nick.z.edwards at gmail.com (Nick Edwards) Date: Tue, 22 Jul 2014 18:48:00 +1000 Subject: Problem with TXT records for ScamNailer and bad_phishing_sites updates In-Reply-To: <53A26EEE.8040303@msapiro.net> References: <53A26EEE.8040303@msapiro.net> Message-ID: is this going to be fixed, or do we just disable this stuff and forget it? On 6/19/14, Mark Sapiro wrote: > The update processes for ScamNailer and update_bad_phishing_sites depend > on DNS TXT records for the domains > emails.msupdate.greylist.bastionmail.com and > msupdate.greylist.bastionmail.com respectively giving data about the > current updates. > > At present, these TXT records don't exist (there are still SPF TXT > records, but not the updates ones). > > We saw a similar issue last year when the bastionmail.com domain > registration expired, and it just expired again on 17 June 2014, but was > apparently renewed on 18 June. > > There are workaround patches at > > and > . > > -- > Mark Sapiro The highway is for gamblers, > San Francisco Bay Area, California better use your sense - B. Dylan > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > From mailscanner at replies.cyways.com Tue Jul 22 21:35:20 2014 From: mailscanner at replies.cyways.com (Peter Lemieux) Date: Tue, 22 Jul 2014 16:35:20 -0400 Subject: Blocking top-level domains In-Reply-To: <2101.dfcd4929.1406013915.nsm@mail.fumlersoft.dk> References: <462D865B978B49479822BC40268BCC820D4A7DD7@mail.dchs.local> <3151.dfcd4929.1405748296.nsm@mail.fumlersoft.dk> <185ED33D2D4C2743B00271D65FB2B79A2674518A@SBS2011.techquility.local> <2101.dfcd4929.1406013915.nsm@mail.fumlersoft.dk> Message-ID: <53CECB08.1010804@replies.cyways.com> In Postfix you need to add these directives to main.cf: smtpd_client_restrictions = reject_unknown_client_hostname, check_sender_access pcre:/etc/postfix/sender_access smtpd_sender_restrictions = reject_unknown_sender_domain, check_sender_access pcre:/etc/postfix/sender_access # block sending servers from non-US/CA locations smtpd_helo_required = yes smtpd_helo_restrictions = check_helo_access pcre:/etc/postfix/helo_access I use Perl-compatible regular expressions to match things I want to block. Thus I have pcre: prefixes in each entry. Postfix supports other methods as well including simple string matching. My /etc/postfix/sender_access file looks like this: # no mail from outsiders claiming to be us /\.example\.com$/ REJECT # no two-letter country-code domains except us/ca /\.us$/ OK /\.ca$/ OK /\.[a-z][a-z]$/ REJECT US senders only # various blacklists /\.hostnoc\.net$/ REJECT /\.pawlitenews\.com/ REJECT This particular client is a small healthcare provider that does not need to receive mail from locales outside the US/CA. Blocking foreign country-code domains cuts down a lot of spam. Peter On 07/22/2014 03:25 AM, Mogens Melander wrote: > Sorry, I don't. But google gave me this: > > http://www.postfix.org/access.5.html > > On Tue, July 22, 2014 04:11, Chris Barber wrote: >> Ahh, brilliant! We are using postfix instead of sendmail, do you know what >> the correspoding file in Postfix is for this? >> >> Thanks! >> Chris >> >> >> -----Original Message----- >> From: mailscanner-bounces at lists.mailscanner.info >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens >> Melander >> Sent: Saturday, July 19, 2014 1:38 AM >> To: mailscanner at lists.mailscanner.info >> Subject: Re: Blocking top-level domains >> >> Hi >> >> I'm doing stuff like that in sendmail's access (/etc/mail/access) file, >> with entries like: >> >> cn.ru ERROR:"550 Reject : cn.ru - Spam source" >> >> Works like a charm :) >> >> On Fri, July 18, 2014 19:47, Bryan Laurila wrote: >>> I had an interesting situation creep up on me this week where I >>> thought that something was happening (or being processed) in >>> MailScanner/SpamAssassin but apparently it was not. >>> >>> I have two mail relay scanners running MailScanner & SpamAssassin on >>> Suse Linux. These boxes scan incoming mail for spam & viruses and >>> then relay to my MS Exchange server. I had an influx of spam this >>> week coming in from several top-level domains that we wouldn't >>> normally receive any valid emails from anyway, like .eu, .in, .asia, >>> .club, etc. >>> >>> >>> Upon investigating the situation I found that the Trend Micro Scan >>> Mail service on my Exchange server crashed which lead me to the >>> discovery that MailScanner & SpamAssassin weren't filtering mail from >>> these unwanted top level domains as I thought and all that work was >>> being done by my exchange server. >>> >>> So, the question of the day is... Where is the best place to turn on >>> filtering or set a rule somehow to filter unwanted top-level domains >>> at the MailScanner/SpamAssassin servers? >>> >>> Like all things in IT there are probably multiple ways of doing this >>> so I am curious as to what others are doing. All thoughts & comments >>> are welcome. >>> >>> Thanks! >>> >>> Bryan S. Laurila >>> Senior Network Support Analyst >>> Dickinson County Healthcare System >>> 1721 South Stephenson Avenue >>> Iron Mountain, Michigan 49801 >>> > > From max at inmindlabs.com Thu Jul 24 14:06:04 2014 From: max at inmindlabs.com (Max Kipness) Date: Thu, 24 Jul 2014 08:06:04 -0500 Subject: Bayes test skipped on one email Message-ID: <11375BD8FE838A409E10DB32B9BFFE9B9E721B@addc01.assuredata.local> Hello, Has anyone ever seen this were bayes is skipped on one (or maybe more) email only? Now I'm wondering if this happens at other times. I guess I could do grep to see. This email, which had an SCR attachment barely got through due to the lack of Bayes score on it. The email before it and after it had Bayes scores. Jul 24 05:25:08 xxxx-01 MailScanner[25466]: Message s6OAOTWg007338 from xx.xx.xx.xx (fsodqraup at leftcoasteng.com) to xxxx.com is not spam, SpamAssassin (not cached, score=3.935, required 4.5, autolearn=disabled, DCC_CHECK 1.10, DIET_SPAM 0.25, DIGEST_MULTIPLE 0.29, FROM_12LTRDOM 0.10, PYZOR_CHECK 1.39, ZIP_ATTACHED 0.80) Thanks, Max From mailscanner-list at okla.com Fri Jul 25 17:20:14 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Fri, 25 Jul 2014 11:20:14 -0500 Subject: Bayes test skipped on one email In-Reply-To: <11375BD8FE838A409E10DB32B9BFFE9B9E721B@addc01.assuredata.local> References: <11375BD8FE838A409E10DB32B9BFFE9B9E721B@addc01.assuredata.local> Message-ID: <000d01cfa824$544300c0$fcc90240$@okla.com> The autolearn=disabled seems strange indeed. Tracy -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Max Kipness Sent: Thursday, July 24, 2014 8:06 AM To: mailscanner at lists.mailscanner.info Subject: Bayes test skipped on one email Hello, Has anyone ever seen this were bayes is skipped on one (or maybe more) email only? Now I'm wondering if this happens at other times. I guess I could do grep to see. This email, which had an SCR attachment barely got through due to the lack of Bayes score on it. The email before it and after it had Bayes scores. Jul 24 05:25:08 xxxx-01 MailScanner[25466]: Message s6OAOTWg007338 from xx.xx.xx.xx (fsodqraup at leftcoasteng.com) to xxxx.com is not spam, SpamAssassin (not cached, score=3.935, required 4.5, autolearn=disabled, DCC_CHECK 1.10, DIET_SPAM 0.25, DIGEST_MULTIPLE 0.29, FROM_12LTRDOM 0.10, PYZOR_CHECK 1.39, ZIP_ATTACHED 0.80) Thanks, Max -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From Kevin_Miller at ci.juneau.ak.us Mon Jul 28 22:16:55 2014 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Mon, 28 Jul 2014 13:16:55 -0800 Subject: Problem Messages Message-ID: A week and a half ago a message came in that was quarantined for trying to kill off MailScanner. Once an hour I began receiving the message below in postmaster's mailbox. I deleted the message, but it's still sending these alerts. The message doesn't exist in /var/spool/mqueue (or anywhere else for that matter). What do I need to do to finish cleaning up this error message. I was hoping after 6 days it would go away on it's own like normal undeliverable mail does, but no such luck. ------------------------------------------------- Archive: Number of messages: 1 Tries Message Last Tried ===== ======= ========== 6 s6GMUGOn025438 Wed Jul 16 14:55:00 2014 -- MailScanner ------------------------------------------------- Thanks... ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357 From piper at hrz.uni-marburg.de Tue Jul 29 06:35:10 2014 From: piper at hrz.uni-marburg.de (Piper Andreas) Date: Tue, 29 Jul 2014 07:35:10 +0200 Subject: Problem Messages In-Reply-To: References: Message-ID: <53D7328E.6030504@hrz.uni-marburg.de> Hello, Am 28.07.2014 23:16, schrieb Kevin Miller: > A week and a half ago a message came in that was quarantined for trying to kill off MailScanner. Once an hour I began receiving the message below in postmaster's mailbox. I deleted the message, but it's still sending these alerts. The message doesn't exist in /var/spool/mqueue (or anywhere else for that matter). What do I need to do to finish cleaning up this error message. I was hoping after 6 days it would go away on it's own like normal undeliverable mail does, but no such luck. > > > ------------------------------------------------- > Archive: > > Number of messages: 1 > Tries Message Last Tried > ===== ======= ========== > 6 s6GMUGOn025438 Wed Jul 16 14:55:00 2014 > see http://comments.gmane.org/gmane.mail.virus.mailscanner/77808 The solution in short: reproduce your problem message with /usr/sbin/MailScanner --processing stop MailScanner, remove the processing DB and restart MailScanner with /etc/init.d/mailscanner stop && rm /var/spool/MailScanner/incoming/Processing.db && /etc/init.d/mailscanner start check success with /usr/sbin/MailScanner --processing which should give empty output now Andreas From gledford at phhwtechnology.com Tue Jul 29 16:48:36 2014 From: gledford at phhwtechnology.com (Greg Ledford) Date: Tue, 29 Jul 2014 15:48:36 +0000 Subject: New to MailScanner Message-ID: Hello. Please be kind as I'm still learning the program and I'll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/dff6a925/attachment.html From Kevin_Miller at ci.juneau.ak.us Tue Jul 29 17:32:13 2014 From: Kevin_Miller at ci.juneau.ak.us (Kevin Miller) Date: Tue, 29 Jul 2014 08:32:13 -0800 Subject: Problem Messages In-Reply-To: <53D7328E.6030504@hrz.uni-marburg.de> References: <53D7328E.6030504@hrz.uni-marburg.de> Message-ID: Perfect, thanks much. ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357 -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Piper Andreas Sent: Monday, July 28, 2014 9:35 PM To: mailscanner at lists.mailscanner.info Subject: Re: Problem Messages Hello, Am 28.07.2014 23:16, schrieb Kevin Miller: > A week and a half ago a message came in that was quarantined for trying to kill off MailScanner. Once an hour I began receiving the message below in postmaster's mailbox. I deleted the message, but it's still sending these alerts. The message doesn't exist in /var/spool/mqueue (or anywhere else for that matter). What do I need to do to finish cleaning up this error message. I was hoping after 6 days it would go away on it's own like normal undeliverable mail does, but no such luck. > > > ------------------------------------------------- > Archive: > > Number of messages: 1 > Tries Message Last Tried > ===== ======= ========== > 6 s6GMUGOn025438 Wed Jul 16 14:55:00 2014 > see http://comments.gmane.org/gmane.mail.virus.mailscanner/77808 The solution in short: reproduce your problem message with /usr/sbin/MailScanner --processing stop MailScanner, remove the processing DB and restart MailScanner with /etc/init.d/mailscanner stop && rm /var/spool/MailScanner/incoming/Processing.db && /etc/init.d/mailscanner start check success with /usr/sbin/MailScanner --processing which should give empty output now Andreas -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! From mailscanner-list at okla.com Tue Jul 29 19:47:43 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Tue, 29 Jul 2014 13:47:43 -0500 Subject: New to MailScanner In-Reply-To: References: Message-ID: <006601cfab5d$98764630$c962d290$@okla.com> I use sendmail, so someone else can comment on your postfix question. I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. Regards, Tracy Greggs From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: Tuesday, July 29, 2014 10:49 AM To: 'mailscanner at lists.mailscanner.info' Subject: New to MailScanner Hello. Please be kind as I'm still learning the program and I'll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/27786639/attachment.html From jerry.benton at mailborder.com Tue Jul 29 20:58:23 2014 From: jerry.benton at mailborder.com (Jerry Benton) Date: Tue, 29 Jul 2014 15:58:23 -0400 Subject: New to MailScanner In-Reply-To: <006601cfab5d$98764630$c962d290$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> Message-ID: <530B4105-6625-4EB7-8FF7-ED99F4314BF9@mailborder.com> If you are running a small instance (1 domain) Mailborder also provides a postfix base and is free. - Jerry Benton www.mailborder.com On Jul 29, 2014, at 2:47 PM, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. > > Regards, > Tracy Greggs > > > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > Hello. Please be kind as I?m still learning the program and I?ll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/7afa321d/attachment.html From jerry.benton at mailborder.com Tue Jul 29 21:00:23 2014 From: jerry.benton at mailborder.com (Jerry Benton) Date: Tue, 29 Jul 2014 16:00:23 -0400 Subject: New to MailScanner In-Reply-To: <006601cfab5d$98764630$c962d290$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> Message-ID: If you are running a small instance (1 domain) Mailborder also provides a postfix base and is free. - Jerry Benton www.mailborder.com On Jul 29, 2014, at 2:47 PM, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. > > Regards, > Tracy Greggs > > > From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > Hello. Please be kind as I?m still learning the program and I?ll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/e7888adf/attachment.html From mailscanner-list at okla.com Tue Jul 29 21:06:34 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Tue, 29 Jul 2014 15:06:34 -0500 Subject: New to MailScanner In-Reply-To: <006601cfab5d$98764630$c962d290$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> Message-ID: <00a901cfab68$9c755f40$d5601dc0$@okla.com> BTW, Exchange 2013 does not have recipient checking integrated into their antispam feature set. This has proven to be a real PITA when using MailScanner as a gateway. Another brilliant move from Microsoft! Regards From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tracy Greggs Sent: Tuesday, July 29, 2014 1:48 PM To: 'MailScanner discussion' Subject: RE: New to MailScanner I use sendmail, so someone else can comment on your postfix question. I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. Regards, Tracy Greggs From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: Tuesday, July 29, 2014 10:49 AM To: 'mailscanner at lists.mailscanner.info' Subject: New to MailScanner Hello. Please be kind as I'm still learning the program and I'll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/290119a9/attachment.html From mailbag at partnersolutions.ca Tue Jul 29 21:47:30 2014 From: mailbag at partnersolutions.ca (PSI Mailbag) Date: Tue, 29 Jul 2014 20:47:30 +0000 Subject: New to MailScanner In-Reply-To: References: Message-ID: Hey Greg, Not in so many words, but you could try the following: http://wiki.mailscanner.info/doku.php?id=maq:index http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:how_to:setup_a_gateway http://www.ingent.net/en/2011/11/catala-evitant-el-backscatting-amb-postfix-i-exchange/ Personally I use a dual-instance Postfix method protecting my Exchange servers. A list of valid recipients is pushed to the servers on a frequent basis to only allow known email addresses through, similar to what's being described in the last URL, except for the parts about exposing SMB or LDAP from the internal network.. You can generate the user list by modifying the example VBS (but take into account contacts, groups and mail enabled public folders), or roll your own in your language of choice. You can setup PSCP to push the file to your Postfix server via trusted keys (ideally as a non-privileged user), and protect it with something like rssh to only allow restricted scp access (depending on your version of OpenSSH). -Joshua From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: July-29-14 11:49 AM To: 'mailscanner at lists.mailscanner.info' Subject: New to MailScanner Hello. Please be kind as I'm still learning the program and I'll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/08fdb089/attachment.html From rlopezcnm at gmail.com Tue Jul 29 22:52:42 2014 From: rlopezcnm at gmail.com (Robert Lopez) Date: Tue, 29 Jul 2014 15:52:42 -0600 Subject: New to MailScanner In-Reply-To: References: Message-ID: Greg, Where I work we do run a few email gateways that are MailScanner + Postfix in front of other systems including Exchange 2010. If it will work for you I would recommend Mailborder from Jerry Benton. He has put a lot of work into it and it is a good product. If you have requirements that are different from his model then it might not be the best choice. It is worth checking out as it is nearly turn key (minimal configuration). PSI Mailbag has already given you the links I would have recommended to you. I am not aware of better, except possibly for the documentation in the MailScanner code. Most of the documentation in Julian Field's MailScanner book comes straight out of the code documentation (and it stays current; as current as MailScanner changes by Julian). -- Robert Lopez CNM -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140729/6de7cc43/attachment.html From mogens at fumlersoft.dk Wed Jul 30 08:35:48 2014 From: mogens at fumlersoft.dk (Mogens Melander) Date: Wed, 30 Jul 2014 09:35:48 +0200 (CEST) Subject: New to MailScanner In-Reply-To: <006601cfab5d$98764630$c962d290$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> Message-ID: <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> It's probably just me, but. Why would the OP need a paid service to do, what his free, and very potent gateway, will do for him, in less cycles. Saving him the hassle of dealing with a commercial entity, instead of a friendly and helpful user community. A few keywords in google's search box would bring him more helpful suggestions than yours. BTW. I use sendmail too. I use smf graylisting: http://www.greylisting.org/implementations/sendmail.shtml https://www.google.dk/?gws_rd=ssl#newwindow=1&q=smf+greylisting+postfix If it's not postfix friendly, something similar should be easy to find. Just a brain fart. On Tue, July 29, 2014 20:47, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is > cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg > Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > > > Hello. Please be kind as I'm still learning the program and I'll have lots > of questions. Is there a webpage that lists the instructions to install > MailScanner + Postfix if you are using it as a front-end for an Exchange > 2010 server? Thanks for any help you can provide. > > > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jerry.benton at mailborder.com Wed Jul 30 10:02:18 2014 From: jerry.benton at mailborder.com (Jerry Benton) Date: Wed, 30 Jul 2014 05:02:18 -0400 Subject: New to MailScanner In-Reply-To: <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> References: <006601cfab5d$98764630$c962d290$@okla.com> <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> Message-ID: <865E7382-4B96-47C2-8AAC-7C3E2D0AC066@mailborder.com> If he is new to MailScanner then it would be easier to setup Baruwa or Mailborder. Mailborder takes about 5 minutes to install. It takes about 1 minute to set it up. There is also a free version of both Baruwa and Mailborder. Both front ends are also run by members of the user community. Postgrey works with postfix. (It?s a check box on Mailborder.) I am not sure if Andrew has built Greylisting into the GUI on Baruwa. - Jerry Benton www.mailborder.com On Jul 30, 2014, at 3:35 AM, Mogens Melander wrote: > It's probably just me, but. > > Why would the OP need a paid service to do, what his free, and very > potent gateway, will do for him, in less cycles. Saving him the hassle > of dealing with a commercial entity, instead of a friendly and helpful > user community. > > A few keywords in google's search box would bring him more helpful > suggestions than yours. > > BTW. I use sendmail too. I use smf graylisting: > > http://www.greylisting.org/implementations/sendmail.shtml > > https://www.google.dk/?gws_rd=ssl#newwindow=1&q=smf+greylisting+postfix > > If it's not postfix friendly, something similar should be easy to find. > > Just a brain fart. > > On Tue, July 29, 2014 20:47, Tracy Greggs wrote: >> I use sendmail, so someone else can comment on your postfix question. >> >> >> >> I would make a suggestion to turn on the Exchange antispam feature for >> recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is >> cheap but not free, but well worth the expense. >> >> >> >> Regards, >> >> Tracy Greggs >> >> >> >> >> >> From: mailscanner-bounces at lists.mailscanner.info >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg >> Ledford >> Sent: Tuesday, July 29, 2014 10:49 AM >> To: 'mailscanner at lists.mailscanner.info' >> Subject: New to MailScanner >> >> >> >> Hello. Please be kind as I'm still learning the program and I'll have lots >> of questions. Is there a webpage that lists the instructions to install >> MailScanner + Postfix if you are using it as a front-end for an Exchange >> 2010 server? Thanks for any help you can provide. >> >> >> >> >> Greg Ledford >> PHHW Technology Services LLC >> 1000 Corporate Centre Dr, Ste 200 >> Franklin, TN 37067 >> Office (615) 778-1777 >> Cell (615) 403-6989 >> >> Fax (615) 771-0081 >> Email gledford at phhwtechnology.com >> >> >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> -- >> MailScanner mailing list >> mailscanner at lists.mailscanner.info >> http://lists.mailscanner.info/mailman/listinfo/mailscanner >> >> Before posting, read http://wiki.mailscanner.info/posting >> >> Support MailScanner development - buy the book off the website! >> > > > -- > Mogens Melander > +66 8701 33224 > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/fa0b0fc8/attachment.html From mailscanner-list at okla.com Wed Jul 30 13:46:56 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Wed, 30 Jul 2014 07:46:56 -0500 Subject: New to MailScanner In-Reply-To: <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> References: <006601cfab5d$98764630$c962d290$@okla.com> <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> Message-ID: <013001cfabf4$5c82f550$1588dff0$@okla.com> Milter-Ahead is just a commercial mail filter addon. It is a 1 time cost of a little over 100.00 US. It checks with the exchange box to see if it is a valid recipient before MailScanner processes it. It caches results as well. If we wanted to have a discussion about free and not free, exchange is certainly not free. I was merely trying to point out that in a MailScanner gateway setup for exchange, Milter-Ahead works great for making sure the recipient is valid on the exchange server before any processing. It really has nothing to do with spam filtering, it just keeps you from processing mail with the MailScanner gateway and shipping it to the exchange box after when it is not a valid recipient on the exchange box in the 1st place. Perhaps you misunderstood the point I was making. How does graylisting do that or have anything to do with that? Regards -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander Sent: Wednesday, July 30, 2014 2:36 AM To: MailScanner discussion Subject: RE: New to MailScanner It's probably just me, but. Why would the OP need a paid service to do, what his free, and very potent gateway, will do for him, in less cycles. Saving him the hassle of dealing with a commercial entity, instead of a friendly and helpful user community. A few keywords in google's search box would bring him more helpful suggestions than yours. BTW. I use sendmail too. I use smf graylisting: http://www.greylisting.org/implementations/sendmail.shtml https://www.google.dk/?gws_rd=ssl#newwindow=1&q=smf+greylisting+postfix If it's not postfix friendly, something similar should be easy to find. Just a brain fart. On Tue, July 29, 2014 20:47, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It > is cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg > Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > > > Hello. Please be kind as I'm still learning the program and I'll have > lots of questions. Is there a webpage that lists the instructions to > install MailScanner + Postfix if you are using it as a front-end for > an Exchange > 2010 server? Thanks for any help you can provide. > > > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email > gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be > clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From alex at vidadigital.com.pa Wed Jul 30 13:59:23 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Wed, 30 Jul 2014 07:59:23 -0500 Subject: New to MailScanner In-Reply-To: <00a901cfab68$9c755f40$d5601dc0$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> Message-ID: You could, at least in theory, use plugins to check recipients using LDAP in Active Directory - this plus proper SPF implementation reduces a lot of the fake "from" and bogus "to" addresses for your domain. *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs wrote: > BTW, Exchange 2013 does not have recipient checking integrated into their > antispam feature set. This has proven to be a real PITA when using > MailScanner as a gateway. Another brilliant move from Microsoft! > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [mailto: > mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Tracy Greggs > *Sent:* Tuesday, July 29, 2014 1:48 PM > *To:* 'MailScanner discussion' > *Subject:* RE: New to MailScanner > > > > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is > cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [ > mailto:mailscanner-bounces at lists.mailscanner.info > ] *On Behalf Of *Greg Ledford > *Sent:* Tuesday, July 29, 2014 10:49 AM > *To:* 'mailscanner at lists.mailscanner.info' > *Subject:* New to MailScanner > > > > Hello. Please be kind as I?m still learning the program and I?ll have lots > of questions. Is there a webpage that lists the instructions to install > MailScanner + Postfix if you are using it as a front-end for an Exchange > 2010 server? Thanks for any help you can provide. > > > > > *Greg Ledford* > *PHHW Technology Services LLC* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/d15dc303/attachment.html From mailscanner-list at okla.com Wed Jul 30 15:01:36 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Wed, 30 Jul 2014 09:01:36 -0500 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> Message-ID: <013801cfabfe$ca8dd790$5fa986b0$@okla.com> I agree Alex. LDAP is another solution. Again, I was merely pointing out that a quick cheap fix that I have used in many installations is Milter-Ahead and it does a nice job. It does require the exchange server to have recipient checking function turned on in the anti spam features of exchange which is not supported in exchange 2013. Since the original question was in reference to exchange 2010, I was just letting Greg know about Milter-Ahead because that would do the trick for him. This list is for the community to try to lend help in resolving problems some have with implementations that others on the list have encountered before. I really didn?t think the graylisting post had anything to do with what I was referring to nor did I find productive the ?A few keywords in google's search box would bring him more helpful suggestions than yours? comment. No good deed ?.. Regards From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: Wednesday, July 30, 2014 7:59 AM To: MailScanner discussion Subject: {Disarmed} Re: New to MailScanner You could, at least in theory, use plugins to check recipients using LDAP in Active Directory - this plus proper SPF implementation reduces a lot of the fake "from" and bogus "to" addresses for your domain. Web Bug from http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&key=e5ffd452-112a-466f-a727-8f104a0adba7 Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs wrote: BTW, Exchange 2013 does not have recipient checking integrated into their antispam feature set. This has proven to be a real PITA when using MailScanner as a gateway. Another brilliant move from Microsoft! Regards From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tracy Greggs Sent: Tuesday, July 29, 2014 1:48 PM To: 'MailScanner discussion' Subject: RE: New to MailScanner I use sendmail, so someone else can comment on your postfix question. I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. Regards, Tracy Greggs From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: Tuesday, July 29, 2014 10:49 AM To: 'mailscanner at lists.mailscanner.info' Subject: New to MailScanner Hello. Please be kind as I?m still learning the program and I?ll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/a62516f7/attachment.html From alex at vidadigital.com.pa Wed Jul 30 15:08:31 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Wed, 30 Jul 2014 09:08:31 -0500 Subject: New to MailScanner In-Reply-To: <013001cfabf4$5c82f550$1588dff0$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> <013001cfabf4$5c82f550$1588dff0$@okla.com> Message-ID: I've gone the milter-ahead route myself a couple of times; don't know if/how it applies to Postfix. I did find this through Google: http://acidx.net/wordpress/2014/06/installing-a-mailserver-with-postfix-dovecot-sasl-ldap-roundcube/ In section 6 it describes how Postfix can check LDAP for valid recipients, if I interpret it correctly. Just a brain shart. *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Wed, Jul 30, 2014 at 7:46 AM, Tracy Greggs wrote: > Milter-Ahead is just a commercial mail filter addon. It is a 1 time cost > of > a little over 100.00 US. It checks with the exchange box to see if it is a > valid recipient before MailScanner processes it. It caches results as > well. > > If we wanted to have a discussion about free and not free, exchange is > certainly not free. > > I was merely trying to point out that in a MailScanner gateway setup for > exchange, Milter-Ahead works great for making sure the recipient is valid > on > the exchange server before any processing. > > It really has nothing to do with spam filtering, it just keeps you from > processing mail with the MailScanner gateway and shipping it to the > exchange > box after when it is not a valid recipient on the exchange box in the 1st > place. > > Perhaps you misunderstood the point I was making. > > How does graylisting do that or have anything to do with that? > > Regards > > > -----Original Message----- > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens > Melander > Sent: Wednesday, July 30, 2014 2:36 AM > To: MailScanner discussion > Subject: RE: New to MailScanner > > It's probably just me, but. > > Why would the OP need a paid service to do, what his free, and very potent > gateway, will do for him, in less cycles. Saving him the hassle of dealing > with a commercial entity, instead of a friendly and helpful user community. > > A few keywords in google's search box would bring him more helpful > suggestions than yours. > > BTW. I use sendmail too. I use smf graylisting: > > http://www.greylisting.org/implementations/sendmail.shtml > > https://www.google.dk/?gws_rd=ssl#newwindow=1&q=smf+greylisting+postfix > > If it's not postfix friendly, something similar should be easy to find. > > Just a brain fart. > > On Tue, July 29, 2014 20:47, Tracy Greggs wrote: > > I use sendmail, so someone else can comment on your postfix question. > > > > > > > > I would make a suggestion to turn on the Exchange antispam feature for > > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It > > is cheap but not free, but well worth the expense. > > > > > > > > Regards, > > > > Tracy Greggs > > > > > > > > > > > > From: mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg > > Ledford > > Sent: Tuesday, July 29, 2014 10:49 AM > > To: 'mailscanner at lists.mailscanner.info' > > Subject: New to MailScanner > > > > > > > > Hello. Please be kind as I'm still learning the program and I'll have > > lots of questions. Is there a webpage that lists the instructions to > > install MailScanner + Postfix if you are using it as a front-end for > > an Exchange > > 2010 server? Thanks for any help you can provide. > > > > > > > > > > Greg Ledford > > PHHW Technology Services LLC > > 1000 Corporate Centre Dr, Ste 200 > > Franklin, TN 37067 > > Office (615) 778-1777 > > Cell (615) 403-6989 > > > > Fax (615) 771-0081 > > Email > > gledford at phhwtechnology.com > > > > > > > > > > -- > > This message has been scanned for viruses and dangerous content by > > MailScanner, and is believed to be > > clean. > > > > > > -- > > This message has been scanned for viruses and dangerous content by > > MailScanner, and is believed to be clean. > > > > > > -- > > This message has been scanned for viruses and dangerous content by > > MailScanner, and is believed to be clean. > > > > -- > > MailScanner mailing list > > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > > > Before posting, read http://wiki.mailscanner.info/posting > > > > Support MailScanner development - buy the book off the website! > > > > > -- > Mogens Melander > +66 8701 33224 > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/ede357ff/attachment.html From mailscanner-list at okla.com Wed Jul 30 16:02:40 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Wed, 30 Jul 2014 10:02:40 -0500 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> <013001cfabf4$5c82f550$1588dff0$@okla.com> Message-ID: <015401cfac07$52b00690$f81013b0$@okla.com> I don?t use postfix so I could be off base here, but according to the snertsoft site, milter-ahead works with postfix as well as sendmail. I guess the whole point of my suggestion in the 1st place is that the original poster would want to use some form of recipient verification before processing with MailScanner IMO. In my case Milter-Ahead does a great job but there is always more than 1 way to do things. Regards, Tracy From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: Wednesday, July 30, 2014 9:09 AM To: MailScanner discussion Subject: {Disarmed} Re: New to MailScanner I've gone the milter-ahead route myself a couple of times; don't know if/how it applies to Postfix. I did find this through Google: http://acidx.net/wordpress/2014/06/installing-a-mailserver-with-postfix-dovecot-sasl-ldap-roundcube/ In section 6 it describes how Postfix can check LDAP for valid recipients, if I interpret it correctly. Just a brain shart. Web Bug from http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&key=ae73fb69-185a-4805-8c58-9a6ebd641ab1 Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Wed, Jul 30, 2014 at 7:46 AM, Tracy Greggs wrote: Milter-Ahead is just a commercial mail filter addon. It is a 1 time cost of a little over 100.00 US. It checks with the exchange box to see if it is a valid recipient before MailScanner processes it. It caches results as well. If we wanted to have a discussion about free and not free, exchange is certainly not free. I was merely trying to point out that in a MailScanner gateway setup for exchange, Milter-Ahead works great for making sure the recipient is valid on the exchange server before any processing. It really has nothing to do with spam filtering, it just keeps you from processing mail with the MailScanner gateway and shipping it to the exchange box after when it is not a valid recipient on the exchange box in the 1st place. Perhaps you misunderstood the point I was making. How does graylisting do that or have anything to do with that? Regards -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander Sent: Wednesday, July 30, 2014 2:36 AM To: MailScanner discussion Subject: RE: New to MailScanner It's probably just me, but. Why would the OP need a paid service to do, what his free, and very potent gateway, will do for him, in less cycles. Saving him the hassle of dealing with a commercial entity, instead of a friendly and helpful user community. A few keywords in google's search box would bring him more helpful suggestions than yours. BTW. I use sendmail too. I use smf graylisting: http://www.greylisting.org/implementations/sendmail.shtml https://www.google.dk/?gws_rd=ssl#newwindow=1 &q=smf+greylisting+postfix If it's not postfix friendly, something similar should be easy to find. Just a brain fart. On Tue, July 29, 2014 20:47, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It > is cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg > Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > > > Hello. Please be kind as I'm still learning the program and I'll have > lots of questions. Is there a webpage that lists the instructions to > install MailScanner + Postfix if you are using it as a front-end for > an Exchange > 2010 server? Thanks for any help you can provide. > > > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email > gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be > clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/9f4704a0/attachment.html From alex at vidadigital.com.pa Wed Jul 30 17:23:14 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Wed, 30 Jul 2014 11:23:14 -0500 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: <013801cfabfe$ca8dd790$5fa986b0$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> <013801cfabfe$ca8dd790$5fa986b0$@okla.com> Message-ID: I agree that the greylisting post had nothing to do with it, and I've used milter ahead I'm some installations where LDAP was not available, so I also agree with you on that part. Unfortunately some people can be too adamant about using free (whether or not they're open) tools as opposed to a "right tool for the right job for the right budget" approach. Finally, although I do appreciate when people do their due diligence first, I can understand that they might want to ask the list first instead of doing it "the smart way" as per Esrb's famous article. I usually will say things like "I tried searching for these keywords and found this resource" instead of "Google this first next time" - which in the end is the same thing, but you get more flies with honey... Those of us who've been on the list for years know how you feel... On Wednesday, July 30, 2014, Tracy Greggs wrote: > I agree Alex. LDAP is another solution. > > > > Again, I was merely pointing out that a quick cheap fix that I have used > in many installations is Milter-Ahead and it does a nice job. It does > require the exchange server to have recipient checking function turned on > in the anti spam features of exchange which is not supported in exchange > 2013. > > > > Since the original question was in reference to exchange 2010, I was just > letting Greg know about Milter-Ahead because that would do the trick for > him. > > > > This list is for the community to try to lend help in resolving problems > some have with implementations that others on the list have encountered > before. I really didn?t think the graylisting post had anything to do with > what I was referring to nor did I find productive the ?A few keywords in > google's search box would bring him more helpful suggestions than yours? > comment. > > > > No good deed ?.. > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info > ] > *On Behalf Of *Alex Neuman > *Sent:* Wednesday, July 30, 2014 7:59 AM > *To:* MailScanner discussion > *Subject:* {Disarmed} Re: New to MailScanner > > > > You could, at least in theory, use plugins to check recipients using LDAP > in Active Directory - this plus proper SPF implementation reduces a lot of > the fake "from" and bogus "to" addresses for your domain.[image: Web Bug > from > http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&key=e5ffd452-112a-466f-a727-8f104a0adba7] > > > > > *Alex Neuman van der Hans*Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > Mobile: +507-6781-9505 > Work: +507-832-6725 > Work (USA): +1-440-253-9789 > > Skype: AlexNeuman > > > Don't miss Vida Digital on LiveStream > ! > > Saturdays 8am-10am on 104.3FM Panama > > > Follow *@AlexNeuman * on Twitter > Like Vida Digital on Facebook > > Follow VidaDigital on Instagram > > Subscribe to Vida Digital on Youtube > > > > On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs > wrote: > > BTW, Exchange 2013 does not have recipient checking integrated into their > antispam feature set. This has proven to be a real PITA when using > MailScanner as a gateway. Another brilliant move from Microsoft! > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info > ] > *On Behalf Of *Tracy Greggs > *Sent:* Tuesday, July 29, 2014 1:48 PM > *To:* 'MailScanner discussion' > *Subject:* RE: New to MailScanner > > > > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is > cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info > ] > *On Behalf Of *Greg Ledford > *Sent:* Tuesday, July 29, 2014 10:49 AM > *To:* 'mailscanner at lists.mailscanner.info > ' > *Subject:* New to MailScanner > > > > Hello. Please be kind as I?m still learning the program and I?ll have lots > of questions. Is there a webpage that lists the instructions to install > MailScanner + Postfix if you are using it as a front-end for an Exchange > 2010 server? Thanks for any help you can provide. > > > > > *Greg Ledford* > *PHHW Technology Services LLC* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > -- *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/0cc256bd/attachment-0001.html From gledford at phhwtechnology.com Wed Jul 30 18:03:56 2014 From: gledford at phhwtechnology.com (Greg Ledford) Date: Wed, 30 Jul 2014 17:03:56 +0000 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: <015401cfac07$52b00690$f81013b0$@okla.com> References: <006601cfab5d$98764630$c962d290$@okla.com> <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> <013001cfabf4$5c82f550$1588dff0$@okla.com> <015401cfac07$52b00690$f81013b0$@okla.com> Message-ID: I?m mostly trying to accomplish three things: 1) effective front-end spam filtering 2) FREE software to do it 3) a daily report sent to users to see what was captured so they don?t wonder if they missed a client email that was caught as spam and rejected. I?m not sure if this software will even meet my needs but I?m open to ideas and suggestions. Thanks to everyone for your help. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tracy Greggs Sent: Wednesday, July 30, 2014 10:03 AM To: 'MailScanner discussion' Subject: RE: {Disarmed} Re: New to MailScanner I don?t use postfix so I could be off base here, but according to the snertsoft site, milter-ahead works with postfix as well as sendmail. I guess the whole point of my suggestion in the 1st place is that the original poster would want to use some form of recipient verification before processing with MailScanner IMO. In my case Milter-Ahead does a great job but there is always more than 1 way to do things. Regards, Tracy From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: Wednesday, July 30, 2014 9:09 AM To: MailScanner discussion Subject: {Disarmed} Re: New to MailScanner I've gone the milter-ahead route myself a couple of times; don't know if/how it applies to Postfix. I did find this through Google: http://acidx.net/wordpress/2014/06/installing-a-mailserver-with-postfix-dovecot-sasl-ldap-roundcube/ In section 6 it describes how Postfix can check LDAP for valid recipients, if I interpret it correctly. Just a brain shart. Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Wed, Jul 30, 2014 at 7:46 AM, Tracy Greggs > wrote: Milter-Ahead is just a commercial mail filter addon. It is a 1 time cost of a little over 100.00 US. It checks with the exchange box to see if it is a valid recipient before MailScanner processes it. It caches results as well. If we wanted to have a discussion about free and not free, exchange is certainly not free. I was merely trying to point out that in a MailScanner gateway setup for exchange, Milter-Ahead works great for making sure the recipient is valid on the exchange server before any processing. It really has nothing to do with spam filtering, it just keeps you from processing mail with the MailScanner gateway and shipping it to the exchange box after when it is not a valid recipient on the exchange box in the 1st place. Perhaps you misunderstood the point I was making. How does graylisting do that or have anything to do with that? Regards -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander Sent: Wednesday, July 30, 2014 2:36 AM To: MailScanner discussion Subject: RE: New to MailScanner It's probably just me, but. Why would the OP need a paid service to do, what his free, and very potent gateway, will do for him, in less cycles. Saving him the hassle of dealing with a commercial entity, instead of a friendly and helpful user community. A few keywords in google's search box would bring him more helpful suggestions than yours. BTW. I use sendmail too. I use smf graylisting: http://www.greylisting.org/implementations/sendmail.shtml https://www.google.dk/?gws_rd=ssl#newwindow=1&q=smf+greylisting+postfix If it's not postfix friendly, something similar should be easy to find. Just a brain fart. On Tue, July 29, 2014 20:47, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It > is cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg > Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > > > Hello. Please be kind as I'm still learning the program and I'll have > lots of questions. Is there a webpage that lists the instructions to > install MailScanner + Postfix if you are using it as a front-end for > an Exchange > 2010 server? Thanks for any help you can provide. > > > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email > > gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be > clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/90168160/attachment.html From michael at huntley.net Wed Jul 30 18:06:16 2014 From: michael at huntley.net (Michael Huntley) Date: Wed, 30 Jul 2014 10:06:16 -0700 Subject: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> Message-ID: <53D92608.80806@huntley.net> I prefer to query my domain controllers for the list of valid recipients, and use this attached script to do so. It also pages through the response from Active Directory (pulls 990 items) so you get all valid user emails. There is no mention of an AD domain, so even if this doesn't help Tracy, it may help others. Cheers, Michael Huntley @huntley On 7/30/2014 5:59 AM, Alex Neuman wrote: > You could, at least in theory, use plugins to check recipients using > LDAP in Active Directory - this plus proper SPF implementation reduces > a lot of the fake "from" and bogus "to" addresses for your domain.Web > Bug from > http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&key=e5ffd452-112a-466f-a727-8f104a0adba7 > > > *Alex Neuman van der Hans > *Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > Mobile: +507-6781-9505 > Work: +507-832-6725 > Work (USA): +1-440-253-9789 > Skype: AlexNeuman > > Don't miss Vida Digital on LiveStream > ! > Saturdays 8am-10am on 104.3FM Panama > > Follow *@AlexNeuman * on Twitter > Like Vida Digital on Facebook > Follow VidaDigital on Instagram > Subscribe to Vida Digital on Youtube > > > On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs > > wrote: > > BTW, Exchange 2013 does not have recipient checking integrated > into their antispam feature set. This has proven to be a real > PITA when using MailScanner as a gateway. Another brilliant move > from Microsoft! > > Regards > > *From:*mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info > ] *On Behalf Of > *Tracy Greggs > *Sent:* Tuesday, July 29, 2014 1:48 PM > *To:* 'MailScanner discussion' > *Subject:* RE: New to MailScanner > > I use sendmail, so someone else can comment on your postfix question. > > I would make a suggestion to turn on the Exchange antispam feature > for recipient checking and run MILTER-AHEAD with your MailScanner > MTA. It is cheap but not free, but well worth the expense. > > Regards, > > Tracy Greggs > > *From:*mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info] *On Behalf Of > *Greg Ledford > *Sent:* Tuesday, July 29, 2014 10:49 AM > *To:* 'mailscanner at lists.mailscanner.info > ' > *Subject:* New to MailScanner > > Hello. Please be kind as I'm still learning the program and I'll > have lots of questions. Is there a webpage that lists the > instructions to install MailScanner + Postfix if you are using it > as a front-end for an Exchange 2010 server? Thanks for any help > you can provide. > > > *Greg Ledford* > *_PHHW Technology Services LLC_* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , > and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , > and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , > and is > believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/e8e0137a/attachment.html -------------- next part -------------- #!/usr/bin/perl -T -w # Version 1.02 # This script will pull all users' SMTP addresses from your Active Directory # (including primary and secondary email addresses) and list them in the # format "user at example.com OK" which Postfix uses with relay_recipient_maps. # Be sure to double-check the path to perl above. # This requires Net::LDAP to be installed. To install Net::LDAP, at a shell # type "perl -MCPAN -e shell" and then "install Net::LDAP" use Net::LDAP; use Net::LDAP::Control::Paged; use Net::LDAP::Constant ( "LDAP_CONTROL_PAGED" ); # Enter the path/file for the output $VALID = "/etc/postfix/valid_recipients"; # Enter the FQDN of your Active Directory domain controllers below # # $dc1="hostname1.yourdomain.com"; $dc2="hostname2.yourdomain.com"; # Enter the LDAP container for your userbase. # The syntax is CN=Users,dc=example,dc=com # This can be found by installing the Windows 2000 Support Tools # then running ADSI Edit. # In ADSI Edit, expand the "Domain NC [domaincontroller1.example.com]" & # you will see, for example, DC=example,DC=com (this is your base). # The Users Container will be specified in the right pane as # CN=Users depending on your schema (this is your container). # You can double-check this by clicking "Properties" of your user # folder in ADSI Edit and examining the "Path" value, such as: # LDAP://domaincontroller1.example.com/CN=Users,DC=example,DC=com # which would be $hqbase="cn=Users,dc=example,dc=com" # Note: You can also use just $hqbase="dc=example,dc=com" # # $hqbase="cn=Users,dc=yourdomain,dc=com"; # Enter the username & password for a valid user in your Active Directory # with username in the form cn=username,cn=Users,dc=example,dc=com # Make sure the user's password does not expire. Note that this user # does not require any special privileges. # You can double-check this by clicking "Properties" of your user in # ADSI Edit and examining the "Path" value, such as: # LDAP://domaincontroller1.example.com/CN=user,CN=Users,DC=example,DC=com # which would be $user="cn=user,cn=Users,dc=example,dc=com" # Note: You can also use the UPN login: "user\@example.com" #$user="cn=mail,cn=Users,dc=wavien,dc=com"; # # #Best format is user\@yourdomain.com # $user="user\@yourdomain.com"; $passwd="password"; # # No additional configuration required beyond here # # Connecting to Active Directory domain controllers $noldapserver=0; $ldap = Net::LDAP->new($dc1) or $noldapserver=1; if ($noldapserver == 1) { $ldap = Net::LDAP->new($dc2) or die "Error connecting to specified domain controllers $@ \n"; } $mesg = $ldap->bind ( dn => $user, password =>$passwd); if ( $mesg->code()) { die ("error:", $mesg->code(),"\n","error name: ",$mesg->error_name(), "\n", "error text: ",$mesg->error_text(),"\n"); } # How many LDAP query results to grab for each paged round # Set to under 1000 for Active Directory $page = Net::LDAP::Control::Paged->new( size => 990 ); @args = ( base => $hqbase, # Play around with this to grab objects such as Contacts, Public Folders, etc. # A minimal filter for just users with email would be: # filter => "(&(sAMAccountName=*)(mail=*))" filter => "(& (mailnickname=*) (| (&(objectCategory=person) (objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*))) (&(objectCategory=person)(objectClass=user)(|(homeMDB=*) (msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=contact)) (objectCategory=group)(objectCategory=publicFolder)(objectClass=msExchDynamicDistributionList) ))", control => [ $page ], attrs => "proxyAddresses", ); my $cookie; while(1) { # Perform search my $mesg = $ldap->search( @args ); # Filtering results for proxyAddresses attributes foreach my $entry ( $mesg->entries ) { my $name = $entry->get_value( "cn" ); # LDAP Attributes are multi-valued, so we have to print each one. foreach my $mail ( $entry->get_value( "proxyAddresses" ) ) { # Test if the Line starts with one of the following lines: # proxyAddresses: [smtp|SMTP]: # and also discard this starting string, so that $mail is only the # address without any other characters... if ( $mail =~ s/^(smtp|SMTP)://gs ) { push(@valid, $mail." OK\n"); } } } # Only continue on LDAP_SUCCESS $mesg->code and last; # Get cookie from paged control my($resp) = $mesg->control( LDAP_CONTROL_PAGED ) or last; $cookie = $resp->cookie or last; # Set cookie in paged control $page->cookie($cookie); } if ($cookie) { # We had an abnormal exit, so let the server know we do not want any more $page->cookie($cookie); $page->size(0); $ldap->search( @args ); # Also would be a good idea to die unhappily and inform OP at this point die("LDAP query unsuccessful"); } # Only write the file once the query is successful open VALID, ">$VALID" or die "CANNOT OPEN $VALID $!"; print VALID @valid; # Add additional restrictions, users, etc. to the output file below. #print VALID "user\@example.com OK\n"; #print VALID "user1\@example.com 550 User unknown.\n"; #print VALID "bad.example.com 550 User does not exist.\n"; close VALID; From gledford at phhwtechnology.com Wed Jul 30 18:27:05 2014 From: gledford at phhwtechnology.com (Greg Ledford) Date: Wed, 30 Jul 2014 17:27:05 +0000 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> <013801cfabfe$ca8dd790$5fa986b0$@okla.com> Message-ID: Trust me, I Googled a ton before I bothered the list. I haven?t found anything that meets my needs. Since I run Postfix-Amavis-Spamassassin as a front-end for Exchange, I haven?t found anyone who has successfully tied in the latest version of MailScanner into this type of configuration. Just saying Google it doesn?t even remotely answer the question I originally asked, either. ;) Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: Wednesday, July 30, 2014 11:23 AM To: MailScanner discussion Subject: Re: {Disarmed} Re: New to MailScanner I agree that the greylisting post had nothing to do with it, and I've used milter ahead I'm some installations where LDAP was not available, so I also agree with you on that part. Unfortunately some people can be too adamant about using free (whether or not they're open) tools as opposed to a "right tool for the right job for the right budget" approach. Finally, although I do appreciate when people do their due diligence first, I can understand that they might want to ask the list first instead of doing it "the smart way" as per Esrb's famous article. I usually will say things like "I tried searching for these keywords and found this resource" instead of "Google this first next time" - which in the end is the same thing, but you get more flies with honey... Those of us who've been on the list for years know how you feel... On Wednesday, July 30, 2014, Tracy Greggs > wrote: I agree Alex. LDAP is another solution. Again, I was merely pointing out that a quick cheap fix that I have used in many installations is Milter-Ahead and it does a nice job. It does require the exchange server to have recipient checking function turned on in the anti spam features of exchange which is not supported in exchange 2013. Since the original question was in reference to exchange 2010, I was just letting Greg know about Milter-Ahead because that would do the trick for him. This list is for the community to try to lend help in resolving problems some have with implementations that others on the list have encountered before. I really didn?t think the graylisting post had anything to do with what I was referring to nor did I find productive the ?A few keywords in google's search box would bring him more helpful suggestions than yours? comment. No good deed ?.. Regards From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: Wednesday, July 30, 2014 7:59 AM To: MailScanner discussion Subject: {Disarmed} Re: New to MailScanner You could, at least in theory, use plugins to check recipients using LDAP in Active Directory - this plus proper SPF implementation reduces a lot of the fake "from" and bogus "to" addresses for your domain. Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs > wrote: BTW, Exchange 2013 does not have recipient checking integrated into their antispam feature set. This has proven to be a real PITA when using MailScanner as a gateway. Another brilliant move from Microsoft! Regards From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tracy Greggs Sent: Tuesday, July 29, 2014 1:48 PM To: 'MailScanner discussion' Subject: RE: New to MailScanner I use sendmail, so someone else can comment on your postfix question. I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. Regards, Tracy Greggs From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: Tuesday, July 29, 2014 10:49 AM To: 'mailscanner at lists.mailscanner.info' Subject: New to MailScanner Hello. Please be kind as I?m still learning the program and I?ll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/4ded95ac/attachment-0001.html From alex at vidadigital.com.pa Wed Jul 30 19:52:57 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Wed, 30 Jul 2014 13:52:57 -0500 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> <013801cfabfe$ca8dd790$5fa986b0$@okla.com> Message-ID: Have you tried MailBorder? On Wednesday, July 30, 2014, Greg Ledford wrote: > Trust me, I Googled a ton before I bothered the list. I haven?t found > anything that meets my needs. Since I run Postfix-Amavis-Spamassassin as a > front-end for Exchange, I haven?t found anyone who has successfully tied in > the latest version of MailScanner into this type of configuration. Just > saying Google it doesn?t even remotely answer the question I originally > asked, either. ;) > > > > > *Greg Ledford* > *PHHW Technology Services LLC* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > *From:* mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info > ] > *On Behalf Of *Alex Neuman > *Sent:* Wednesday, July 30, 2014 11:23 AM > *To:* MailScanner discussion > *Subject:* Re: {Disarmed} Re: New to MailScanner > > > > I agree that the greylisting post had nothing to do with it, and I've used > milter ahead I'm some installations where LDAP was not available, so I also > agree with you on that part. > > > > Unfortunately some people can be too adamant about using free (whether or > not they're open) tools as opposed to a "right tool for the right job for > the right budget" approach. > > > > Finally, although I do appreciate when people do their due diligence > first, I can understand that they might want to ask the list first instead > of doing it "the smart way" as per Esrb's famous article. I usually will > say things like "I tried searching for these keywords and found this > resource" instead of "Google this first next time" - which in the end is > the same thing, but you get more flies with honey... > > > > Those of us who've been on the list for years know how you feel... > > > On Wednesday, July 30, 2014, Tracy Greggs > wrote: > > I agree Alex. LDAP is another solution. > > > > Again, I was merely pointing out that a quick cheap fix that I have used > in many installations is Milter-Ahead and it does a nice job. It does > require the exchange server to have recipient checking function turned on > in the anti spam features of exchange which is not supported in exchange > 2013. > > > > Since the original question was in reference to exchange 2010, I was just > letting Greg know about Milter-Ahead because that would do the trick for > him. > > > > This list is for the community to try to lend help in resolving problems > some have with implementations that others on the list have encountered > before. I really didn?t think the graylisting post had anything to do with > what I was referring to nor did I find productive the ?A few keywords in > google's search box would bring him more helpful suggestions than yours? > comment. > > > > No good deed ?.. > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [mailto: > mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Alex Neuman > *Sent:* Wednesday, July 30, 2014 7:59 AM > *To:* MailScanner discussion > *Subject:* {Disarmed} Re: New to MailScanner > > > > You could, at least in theory, use plugins to check recipients using LDAP > in Active Directory - this plus proper SPF implementation reduces a lot of > the fake "from" and bogus "to" addresses for your domain.[image: Web Bug > from > http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&key=e5ffd452-112a-466f-a727-8f104a0adba7] > > > > > *Alex Neuman van der Hans *Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > Mobile: +507-6781-9505 > Work: +507-832-6725 > Work (USA): +1-440-253-9789 > > Skype: AlexNeuman > > > Don't miss Vida Digital on LiveStream > ! > > Saturdays 8am-10am on 104.3FM Panama > > > Follow *@AlexNeuman * on Twitter > Like Vida Digital on Facebook > > Follow VidaDigital on Instagram > > Subscribe to Vida Digital on Youtube > > > > On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs > wrote: > > BTW, Exchange 2013 does not have recipient checking integrated into their > antispam feature set. This has proven to be a real PITA when using > MailScanner as a gateway. Another brilliant move from Microsoft! > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [mailto: > mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Tracy Greggs > *Sent:* Tuesday, July 29, 2014 1:48 PM > *To:* 'MailScanner discussion' > *Subject:* RE: New to MailScanner > > > > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is > cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [ > mailto:mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Greg > Ledford > *Sent:* Tuesday, July 29, 2014 10:49 AM > *To:* 'mailscanner at lists.mailscanner.info' > *Subject:* New to MailScanner > > > > Hello. Please be kind as I?m still learning the program and I?ll have lots > of questions. Is there a webpage that lists the instructions to install > MailScanner + Postfix if you are using it as a front-end for an Exchange > 2010 server? Thanks for any help you can provide. > > > > > *Greg Ledford* > *PHHW Technology Services LLC* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > > -- > > > > *Alex Neuman van der Hans *Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > Mobile: +507-6781-9505 > Work: +507-832-6725 > Work (USA): +1-440-253-9789 > > Skype: AlexNeuman > > > Don't miss Vida Digital on LiveStream > ! > > Saturdays 8am-10am on 104.3FM Panama > > > Follow *@AlexNeuman * on Twitter > Like Vida Digital on Facebook > > Follow VidaDigital on Instagram > > Subscribe to Vida Digital on Youtube > > > -- *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/c1f2b208/attachment.html From alex at vidadigital.com.pa Wed Jul 30 19:52:58 2014 From: alex at vidadigital.com.pa (Alex Neuman) Date: Wed, 30 Jul 2014 13:52:58 -0500 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> <013801cfabfe$ca8dd790$5fa986b0$@okla.com> Message-ID: Sorry, forgot the FREE part in caps... Never mind... On Wednesday, July 30, 2014, Greg Ledford wrote: > Trust me, I Googled a ton before I bothered the list. I haven?t found > anything that meets my needs. Since I run Postfix-Amavis-Spamassassin as a > front-end for Exchange, I haven?t found anyone who has successfully tied in > the latest version of MailScanner into this type of configuration. Just > saying Google it doesn?t even remotely answer the question I originally > asked, either. ;) > > > > > *Greg Ledford* > *PHHW Technology Services LLC* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > *From:* mailscanner-bounces at lists.mailscanner.info > > [mailto:mailscanner-bounces at lists.mailscanner.info > ] > *On Behalf Of *Alex Neuman > *Sent:* Wednesday, July 30, 2014 11:23 AM > *To:* MailScanner discussion > *Subject:* Re: {Disarmed} Re: New to MailScanner > > > > I agree that the greylisting post had nothing to do with it, and I've used > milter ahead I'm some installations where LDAP was not available, so I also > agree with you on that part. > > > > Unfortunately some people can be too adamant about using free (whether or > not they're open) tools as opposed to a "right tool for the right job for > the right budget" approach. > > > > Finally, although I do appreciate when people do their due diligence > first, I can understand that they might want to ask the list first instead > of doing it "the smart way" as per Esrb's famous article. I usually will > say things like "I tried searching for these keywords and found this > resource" instead of "Google this first next time" - which in the end is > the same thing, but you get more flies with honey... > > > > Those of us who've been on the list for years know how you feel... > > > On Wednesday, July 30, 2014, Tracy Greggs > wrote: > > I agree Alex. LDAP is another solution. > > > > Again, I was merely pointing out that a quick cheap fix that I have used > in many installations is Milter-Ahead and it does a nice job. It does > require the exchange server to have recipient checking function turned on > in the anti spam features of exchange which is not supported in exchange > 2013. > > > > Since the original question was in reference to exchange 2010, I was just > letting Greg know about Milter-Ahead because that would do the trick for > him. > > > > This list is for the community to try to lend help in resolving problems > some have with implementations that others on the list have encountered > before. I really didn?t think the graylisting post had anything to do with > what I was referring to nor did I find productive the ?A few keywords in > google's search box would bring him more helpful suggestions than yours? > comment. > > > > No good deed ?.. > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [mailto: > mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Alex Neuman > *Sent:* Wednesday, July 30, 2014 7:59 AM > *To:* MailScanner discussion > *Subject:* {Disarmed} Re: New to MailScanner > > > > You could, at least in theory, use plugins to check recipients using LDAP > in Active Directory - this plus proper SPF implementation reduces a lot of > the fake "from" and bogus "to" addresses for your domain.[image: Web Bug > from > http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlGICAgKCUyroKDA&key=e5ffd452-112a-466f-a727-8f104a0adba7] > > > > > *Alex Neuman van der Hans *Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > Mobile: +507-6781-9505 > Work: +507-832-6725 > Work (USA): +1-440-253-9789 > > Skype: AlexNeuman > > > Don't miss Vida Digital on LiveStream > ! > > Saturdays 8am-10am on 104.3FM Panama > > > Follow *@AlexNeuman * on Twitter > Like Vida Digital on Facebook > > Follow VidaDigital on Instagram > > Subscribe to Vida Digital on Youtube > > > > On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs > wrote: > > BTW, Exchange 2013 does not have recipient checking integrated into their > antispam feature set. This has proven to be a real PITA when using > MailScanner as a gateway. Another brilliant move from Microsoft! > > > > Regards > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [mailto: > mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Tracy Greggs > *Sent:* Tuesday, July 29, 2014 1:48 PM > *To:* 'MailScanner discussion' > *Subject:* RE: New to MailScanner > > > > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is > cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > *From:* mailscanner-bounces at lists.mailscanner.info [ > mailto:mailscanner-bounces at lists.mailscanner.info] *On Behalf Of *Greg > Ledford > *Sent:* Tuesday, July 29, 2014 10:49 AM > *To:* 'mailscanner at lists.mailscanner.info' > *Subject:* New to MailScanner > > > > Hello. Please be kind as I?m still learning the program and I?ll have lots > of questions. Is there a webpage that lists the instructions to install > MailScanner + Postfix if you are using it as a front-end for an Exchange > 2010 server? Thanks for any help you can provide. > > > > > *Greg Ledford* > *PHHW Technology Services LLC* > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > > > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > -- > This message has been scanned for viruses and > dangerous content by *MailScanner* , and is > believed to be clean. > > > > -- > > > > *Alex Neuman van der Hans *Reliant Technologies / Vida Digital > http://vidadigital.com.pa/ > > Mobile: +507-6781-9505 > Work: +507-832-6725 > Work (USA): +1-440-253-9789 > > Skype: AlexNeuman > > > Don't miss Vida Digital on LiveStream > ! > > Saturdays 8am-10am on 104.3FM Panama > > > Follow *@AlexNeuman * on Twitter > Like Vida Digital on Facebook > > Follow VidaDigital on Instagram > > Subscribe to Vida Digital on Youtube > > > -- *Alex Neuman van der Hans*Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow *@AlexNeuman * on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/5c2a7688/attachment.html From mailscanner-list at okla.com Thu Jul 31 02:48:43 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Wed, 30 Jul 2014 20:48:43 -0500 Subject: {Disarmed} Re: New to MailScanner In-Reply-To: References: <006601cfab5d$98764630$c962d290$@okla.com> <4801.dfcd4b5d.1406705748.nsm@mail.fumlersoft.dk> <013001cfabf4$5c82f550$1588dff0$@okla.com> <015401cfac07$52b00690$f81013b0$@okla.com> Message-ID: <01c001cfac61$93781780$ba684680$@okla.com> Hey Greg: Here is my take for whatever it is worth: 1 ? effective front-end spam filtering ?YES!!! 2 ? free software ?YES!!! 3 - Daily reports: OK for this you would want IMO either: A: MailWatch - https://github.com/mailwatch/1.2.0 MailWatch has been around since 9/2003, the development team has changed in the past few years, I have been working with one of the coders, Phil Randal to clean up most of the issues with the current 1.2.0 Beta 6 Dev and it still needs a few minor fixes but all in all a great interface. The reporting function works OK at this point in time but is due for some recoding that I am sure will be done in the near future. PHP web interface/MySQL DB B: Baruwa - https://www.baruwa.org/ V1.x has an rpm repo for installation ease and it is free. V2.x packaged versions require an annual subscription, http://www.baruwa.com V2.x Source installation appears to still be free, not 100% sure though. They have a MW vs Baruwa comparison chart at https://www.baruwa.org/blog/2013/04/26/baruwa-vs-mailwatch---a-feature-comparison-update/ I haven't run the newer 2.x versions because among other reasons it does not have sendmail support. I think it only supports Exim and Postfix. Good luck with it, need any help with MW just ask. Regards, Tracy Greggs From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: Wednesday, July 30, 2014 12:04 PM To: 'MailScanner discussion' Subject: RE: {Disarmed} Re: New to MailScanner I?m mostly trying to accomplish three things: 1) effective front-end spam filtering 2) FREE software to do it 3) a daily report sent to users to see what was captured so they don?t wonder if they missed a client email that was caught as spam and rejected. I?m not sure if this software will even meet my needs but I?m open to ideas and suggestions. Thanks to everyone for your help. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tracy Greggs Sent: Wednesday, July 30, 2014 10:03 AM To: 'MailScanner discussion' Subject: RE: {Disarmed} Re: New to MailScanner I don?t use postfix so I could be off base here, but according to the snertsoft site, milter-ahead works with postfix as well as sendmail. I guess the whole point of my suggestion in the 1st place is that the original poster would want to use some form of recipient verification before processing with MailScanner IMO. In my case Milter-Ahead does a great job but there is always more than 1 way to do things. Regards, Tracy From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex Neuman Sent: Wednesday, July 30, 2014 9:09 AM To: MailScanner discussion Subject: {Disarmed} Re: New to MailScanner I've gone the milter-ahead route myself a couple of times; don't know if/how it applies to Postfix. I did find this through Google: http://acidx.net/wordpress/2014/06/installing-a-mailserver-with-postfix-dovecot-sasl-ldap-roundcube/ In section 6 it describes how Postfix can check LDAP for valid recipients, if I interpret it correctly. Just a brain shart. Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Wed, Jul 30, 2014 at 7:46 AM, Tracy Greggs wrote: Milter-Ahead is just a commercial mail filter addon. It is a 1 time cost of a little over 100.00 US. It checks with the exchange box to see if it is a valid recipient before MailScanner processes it. It caches results as well. If we wanted to have a discussion about free and not free, exchange is certainly not free. I was merely trying to point out that in a MailScanner gateway setup for exchange, Milter-Ahead works great for making sure the recipient is valid on the exchange server before any processing. It really has nothing to do with spam filtering, it just keeps you from processing mail with the MailScanner gateway and shipping it to the exchange box after when it is not a valid recipient on the exchange box in the 1st place. Perhaps you misunderstood the point I was making. How does graylisting do that or have anything to do with that? Regards -----Original Message----- From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Mogens Melander Sent: Wednesday, July 30, 2014 2:36 AM To: MailScanner discussion Subject: RE: New to MailScanner It's probably just me, but. Why would the OP need a paid service to do, what his free, and very potent gateway, will do for him, in less cycles. Saving him the hassle of dealing with a commercial entity, instead of a friendly and helpful user community. A few keywords in google's search box would bring him more helpful suggestions than yours. BTW. I use sendmail too. I use smf graylisting: http://www.greylisting.org/implementations/sendmail.shtml https://www.google.dk/?gws_rd=ssl#newwindow=1&q=smf+greylisting+postfix If it's not postfix friendly, something similar should be easy to find. Just a brain fart. On Tue, July 29, 2014 20:47, Tracy Greggs wrote: > I use sendmail, so someone else can comment on your postfix question. > > > > I would make a suggestion to turn on the Exchange antispam feature for > recipient checking and run MILTER-AHEAD with your MailScanner MTA. It > is cheap but not free, but well worth the expense. > > > > Regards, > > Tracy Greggs > > > > > > From: mailscanner-bounces at lists.mailscanner.info > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg > Ledford > Sent: Tuesday, July 29, 2014 10:49 AM > To: 'mailscanner at lists.mailscanner.info' > Subject: New to MailScanner > > > > Hello. Please be kind as I'm still learning the program and I'll have > lots of questions. Is there a webpage that lists the instructions to > install MailScanner + Postfix if you are using it as a front-end for > an Exchange > 2010 server? Thanks for any help you can provide. > > > > > Greg Ledford > PHHW Technology Services LLC > 1000 Corporate Centre Dr, Ste 200 > Franklin, TN 37067 > Office (615) 778-1777 > Cell (615) 403-6989 > > Fax (615) 771-0081 > Email > gledford at phhwtechnology.com > > > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be > clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > > -- > This message has been scanned for viruses and dangerous content by > MailScanner, and is believed to be clean. > > -- > MailScanner mailing list > mailscanner at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! > -- Mogens Melander +66 8701 33224 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From mailscanner-list at okla.com Thu Jul 31 03:00:41 2014 From: mailscanner-list at okla.com (Tracy Greggs) Date: Wed, 30 Jul 2014 21:00:41 -0500 Subject: New to MailScanner In-Reply-To: <53D92608.80806@huntley.net> References: <006601cfab5d$98764630$c962d290$@okla.com> <00a901cfab68$9c755f40$d5601dc0$@okla.com> <53D92608.80806@huntley.net> Message-ID: <000c01cfac63$3f02c680$bd085380$@okla.com> It might help me if I ever decide to go the postfix route, thanks for shipping it in. Tracy From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Michael Huntley Sent: Wednesday, July 30, 2014 12:06 PM To: mailscanner at lists.mailscanner.info Subject: Re: New to MailScanner I prefer to query my domain controllers for the list of valid recipients, and use this attached script to do so. It also pages through the response from Active Directory (pulls 990 items) so you get all valid user emails. There is no mention of an AD domain, so even if this doesn't help Tracy, it may help others. Cheers, Michael Huntley @huntley On 7/30/2014 5:59 AM, Alex Neuman wrote: You could, at least in theory, use plugins to check recipients using LDAP in Active Directory - this plus proper SPF implementation reduces a lot of the fake "from" and bogus "to" addresses for your domain. Web Bug from http://t.sigopn05.com/img.gif?ukey=agxzfnNpZ25hbHNjcnhyGAsSC1VzZXJQcm9maWxlG ICAgKCUyroKDA&key=e5ffd452-112a-466f-a727-8f104a0adba7 Alex Neuman van der Hans Reliant Technologies / Vida Digital http://vidadigital.com.pa/ Mobile: +507-6781-9505 Work: +507-832-6725 Work (USA): +1-440-253-9789 Skype: AlexNeuman Don't miss Vida Digital on LiveStream ! Saturdays 8am-10am on 104.3FM Panama Follow @AlexNeuman on Twitter Like Vida Digital on Facebook Follow VidaDigital on Instagram Subscribe to Vida Digital on Youtube On Tue, Jul 29, 2014 at 3:06 PM, Tracy Greggs wrote: BTW, Exchange 2013 does not have recipient checking integrated into their antispam feature set. This has proven to be a real PITA when using MailScanner as a gateway. Another brilliant move from Microsoft! Regards From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Tracy Greggs Sent: Tuesday, July 29, 2014 1:48 PM To: 'MailScanner discussion' Subject: RE: New to MailScanner I use sendmail, so someone else can comment on your postfix question. I would make a suggestion to turn on the Exchange antispam feature for recipient checking and run MILTER-AHEAD with your MailScanner MTA. It is cheap but not free, but well worth the expense. Regards, Tracy Greggs From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Greg Ledford Sent: Tuesday, July 29, 2014 10:49 AM To: 'mailscanner at lists.mailscanner.info' Subject: New to MailScanner Hello. Please be kind as I'm still learning the program and I'll have lots of questions. Is there a webpage that lists the instructions to install MailScanner + Postfix if you are using it as a front-end for an Exchange 2010 server? Thanks for any help you can provide. Greg Ledford PHHW Technology Services LLC 1000 Corporate Centre Dr, Ste 200 Franklin, TN 37067 Office (615) 778-1777 Cell (615) 403-6989 Fax (615) 771-0081 Email gledford at phhwtechnology.com -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- MailScanner mailing list mailscanner at lists.mailscanner.info http://lists.mailscanner.info/mailman/listinfo/mailscanner Before posting, read http://wiki.mailscanner.info/posting Support MailScanner development - buy the book off the website! -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140730/7bf93de7/attachment.html