Re: spamd and network whitelisting

2017-01-10 Thread Christopher Zimmermann
On 2016-12-16 Clint Pachl wrote: [...] > What would be > best is if we could blacklist these spammers upon first connection I also wanted to just-in-time decisions, but with dnswl lookups. I wrote a program to intercept incoming, unknown smtp connections and do a dnswl lookup to whitelist them j

Re: spamd and network whitelisting

2017-01-09 Thread Boudewijn Dijkstra
Op Tue, 20 Dec 2016 12:31:05 +0100 schreef Clint Pachl : [...] grep "^GREY" | tr "|" "\t" | [...] I've learned to do all parsing of /var/db/spamd via the interface as the envelope-from sometimes contains a "|" (pipe) character. -- Gemaakt met Opera's e-mailprogramma: http://www.opera.com

Re: spamd and network whitelisting

2016-12-21 Thread Boudewijn Dijkstra
Op Tue, 20 Dec 2016 12:51:19 +0100 schreef Clint Pachl : Devin Reade wrote on 12/19/16 12:59: With respect to dealing with SPF, the simple solution (permitting an IP if it is on the sending domain's SPF list) doesn't work too well in the general case since it appears many spammers publish SPF r

Re: spamd and network whitelisting

2016-12-20 Thread Craig Skinner
Hello Clint, On Fri, 16 Dec 2016 07:21:47 -0700 Clint Pachl wrote: > I would like to share my 45-day experience with running spamd and my > observations and how I'm allowing mail from SMTP clusters to bypass > spamd. Feedback and discussion would be greatly appreciated. > spamd in greylisting

Re: spamd and network whitelisting

2016-12-20 Thread Clint Pachl
Devin Reade wrote on 12/19/16 12:59: You might also want to look at bgp-spamd. Yes, this was on my radar for quite some time. However, my simple spamd setup with assistance from the zen.spamhaus.org DNSBL has been extremely effective. It's nice to know we've got more big guns if needed. W

Re: spamd and network whitelisting

2016-12-20 Thread Clint Pachl
Some have requested my scripts and configurations so here it is. Below you fill find the spamd-dnsbl and spamclusterd scripts that are used for blacklisting spammers and whitelisting networks, respectively. Also included is dnsbl-check which I use for testing IPs against multiple DNSBLs. In th

Re: spamd and network whitelisting

2016-12-19 Thread Devin Reade
You might also want to look at bgp-spamd. With respect to dealing with SPF, the simple solution (permitting an IP if it is on the sending domain's SPF list) doesn't work too well in the general case since it appears many spammers publish SPF records. However what I found works well, at least for

spamd and network whitelisting

2016-12-16 Thread Clint Pachl
I would like to share my 45-day experience with running spamd and my observations and how I'm allowing mail from SMTP clusters to bypass spamd. Feedback and discussion would be greatly appreciated. I have two domains that I have been using for my businesses: one is 13 years old and the other i