<div dir="ltr"><div><div>Sean <br>Greylisting is still very very useful and recommended at the MTA level.<br><br></div>Do you reject non-valid recipients at the MTA level as well? <br><br></div>I presume your Spamassassin is upto date and getting the updated rulesets from them automatically?<br><br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature">-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div></div>
<br><div class="gmail_quote">On 6 August 2015 at 19:10, Sean M. Schipper <span dir="ltr"><<a href="mailto:sean.m.schipper@lawrence.edu" target="_blank">sean.m.schipper@lawrence.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="#0563C1" vlink="#954F72" lang="EN-US">
<div>
<p>Email is accepted for a single domain. I use postfix as my MTA.
<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>I employ Spamhaus as an RBL that I use to reject at SMTP. I do use others but do not reject based on them. Any others that are reputable enough to reject with?<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>I haven’t really considered Greylisting. I just read some on it to refresh my memory. Is this commonly used by the MailScanner community?
<u></u><u></u></p>
<p><u></u> <u></u></p>
<p><u></u> <u></u></p>
<p><u></u> <u></u></p>
<p>--<u></u><u></u></p><span class="">
<p><u></u> <u></u></p>
<p>RBL ? Greylisting ? How many domains are you filtering ? What MTA ?<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>--<u></u><u></u></p>
<p>Jeremy McSpadden | Flux Labs<u></u><u></u></p>
</span><p>Local - <a href="tel:850-250-5590x501" value="+18502505590" target="_blank">850-250-5590x501</a><<a href="tel:850-250-5590;501" target="_blank">tel:850-250-5590;501</a>> | Mobile - <a href="tel:850-890-2543" value="+18508902543" target="_blank">850-890-2543</a><<a href="tel:850-890-2543" target="_blank">tel:850-890-2543</a>><u></u><u></u></p>
<p>Fax - <a href="tel:850-254-2955" value="+18502542955" target="_blank">850-254-2955</a><<a href="tel:850-254-2955" target="_blank">tel:850-254-2955</a>> | Toll Free - 877-699-FLUX<<a href="tel:877-699-FLUX" target="_blank">tel:877-699-FLUX</a>><u></u><u></u></p>
<p>Web - <a href="http://www.fluxlabs.net%3chttp:/www.fluxlabs.net/" target="_blank">
http://www.fluxlabs.net<http://www.fluxlabs.net/</a>><u></u><u></u></p><span class="">
<p><u></u> <u></u></p>
<p><u></u> <u></u></p>
<p>On Aug 6, 2015, at 12:49 PM, Sean M. Schipper <<a href="mailto:sean.m.schipper@lawrence.edu%3cmailto:sean.m.schipper@lawrence.edu" target="_blank">sean.m.schipper@lawrence.edu<mailto:sean.m.schipper@lawrence.edu</a>>> wrote:<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>Since last November I've been getting inundated with spam (yesterday just under 7,000 just in the am) from coming from 3 or 4 IP addresses on the same subnet in the morning starting like clockwork just after 9am. Then sometimes I'll
get a similar rush of spam in the afternoon coming from a separate IP range. Countries of origin include US and Bulgaria mostly but also have come from Brasil, Romania and S. Africa.<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>I've been able to train MailScanner to correctly identify these as spam since the content is very similar -- tons of links to websites with .php extensions. Examples of subject lines: Situations for 2015 that forgive your Student-Loan,
12 month MBA programs, accelerated...<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>To cut down on the processing/traffic on my server I've been just blacklisting these IP subnets at smtp with a deny bounce message. Does anyone have any other suggestions on actions I can take to rid myself of this annoying daily routine?
Does anyone else have similar battle stories like this?<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>Thanks for any suggestions on this.<u></u><u></u></p>
<p><u></u> <u></u></p>
<p>Sean<u></u><u></u></p>
<p><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</span></div>
</div>
<br><br>
<br>
--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/listinfo/mailscanner</a><br>
<br>
<br></blockquote></div><br></div>