Re: Finally blocking some spam

2008-10-22 Thread mouss
Randy a écrit : > mouss wrote: >> Joey a écrit : >> [snip] >>> You feel like we are doing you a disservice unintentionally because >>> we may >>> be blocking your IP, but in reality the other people in Poland who are >>> exploiting the internet are to blame. :( reread the last sentence. >> >> If

Re: Finally blocking some spam

2008-10-22 Thread Randy
mouss wrote: Joey a écrit : -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Zbigniew Szalbot Sent: Monday, October 13, 2008 12:06 PM To: Postfix users Subject: Re: Finally blocking some spam I am still using spamhaus at the RBL

RE: Finally blocking some spam

2008-10-22 Thread Joey
Hello, I just wanted to update everyone since it was a bit heated in respect to the methods I was using. Our maillog file shows that we have rejected 3,365,962 month to date. This is above and beyond my original firewall rules, and then my new over the top added country based CIDR rules. This i

Re: Finally blocking some spam

2008-10-20 Thread Charles Marcus
On 10/20/2008, Joey ([EMAIL PROTECTED]) wrote: > Running spamassasin on every domain we support will kill the server > CPU wise and again as in my messages before it's about reducing > overhead. I am abusing some RBL's in some cases so I need to reduce > connections. I highly recommend checking o

RE: Finally blocking some spam

2008-10-19 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of j debert > Sent: Sunday, October 19, 2008 12:53 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > -BEGIN PGP SIGNED MESSAGE- > Ha

Re: Finally blocking some spam

2008-10-19 Thread j debert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joey さんは書きました: ~ SNIP! | | Any suggestions you have to help me reduce the load on the servers, | and the junk in the mailbox are welcome, and I can assure you I | will try just about anything as you can see by my blanketed IP | method which for ref

Re: Finally blocking some spam

2008-10-19 Thread Byung-Hee HWANG
Joey wrote: [...] I made a list from the web of IP’s in the following countries: asian.list czech.list internal-h.list internal-m.list india.list poland.list turkey.list [...] Instead, use RelayCountry plugin of SpamAssassin. Using RelayContry plugin is more smooth than your the way. And mo

Re: Finally blocking some spam

2008-10-17 Thread Jorey Bump
Joey wrote, at 10/17/2008 09:14 PM: >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] >> On Behalf Of j debert >> Sent: Thursday, October 16, 2008 11:26 AM >> To: postfix-users@postfix.org >> Subject: Re: Finally

RE: Finally blocking some spam

2008-10-17 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of j debert > Sent: Thursday, October 16, 2008 11:26 AM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > -BEGIN PGP SIGNED MESSAGE- >

Re: Finally blocking some spam

2008-10-16 Thread j debert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joey さんは書きました: |> -Original Message- |> From: Jorey Bump [mailto:[EMAIL PROTECTED] |> Sent: Monday, October 13, 2008 6:09 PM |> To: Joey |> Cc: postfix-users@postfix.org |> Subject: Re: Finally blocking some spam |> |&

Re: Finally blocking some spam

2008-10-15 Thread mouss
Charles Marcus a écrit : > On 10/13/2008 5:33 PM, Joey wrote: >>> I prefer the animating contest of freedom (and that includes learning >>> how to deal with spam), rather than give over absolute despotic control >>> of the internet to any government agency, which is what you are in >>> essence 'pip

Re: Finally blocking some spam

2008-10-15 Thread Charles Marcus
On 10/13/2008 5:33 PM, Joey wrote: >> I prefer the animating contest of freedom (and that includes learning >> how to deal with spam), rather than give over absolute despotic control >> of the internet to any government agency, which is what you are in >> essence 'pipe-dreaming' about. > Agreed, h

Re: Finally blocking some spam

2008-10-14 Thread Nikita Kipriyanov
Joey пишет: Imagine with a 6GB monthly maillog how long this process can take, it's just too time consuming. No, I cant imagine 6Gb, only 2Gb ;) [machine that I administer] mail # ls -l postfix.* -rw-r- 1 root adm16258536 Окт 14 23:31 postfix.log -rw-r- 1 root root 1923487124 Сен

RE: Finally blocking some spam

2008-10-14 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Nikita Kipriyanov > Sent: Tuesday, October 14, 2008 1:32 AM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey wrote: > > I agree, how

Re: Finally blocking some spam

2008-10-13 Thread Nikita Kipriyanov
Joey wrote: I agree with you and that may be the case for us as well in respect to US spam. I can only tell you that in 4 days we have blocked at the firewall level ( on only 1 server ) 161,166 connections from Poland 1,184,747 connections from Turkey 418,162 connections from Russia 53,656 conne

Re: Finally blocking some spam

2008-10-13 Thread Nikita Kipriyanov
Joey wrote: I agree, however who has these lists. The only place I have found is the http://www.okean.com I keep referring to. I have asked on the list before if anyone else has similar resource with no luck. I have also searched the web without resolve. Have you tried a whois service? Just f

RE: Finally blocking some spam

2008-10-13 Thread Justin Piszcz
On Mon, 13 Oct 2008, Joey wrote: -Original Message- From: Justin Piszcz [mailto:[EMAIL PROTECTED] Sent: Monday, October 13, 2008 6:06 PM To: Joey Cc: postfix-users@postfix.org Subject: RE: Finally blocking some spam On Mon, 13 Oct 2008, Joey wrote: -Original Message

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Justin Piszcz [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 6:06 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: RE: Finally blocking some spam > > > > On Mon, 13 Oct 2008, Joey wrote: > > >

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Jorey Bump [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 6:09 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey wrote, at 10/13/2008 05:10 PM: > Make sure you count t

Re: Finally blocking some spam

2008-10-13 Thread Justin Piszcz
inally blocking some spam What anti-spam measurements do you currently use? What does your main.cf look like? (Snip) reject_rbl_client dul.dnsbl.sorbs.net, reject_rbl_client psbl.surriel.com,reject_rbl_client ix.dnsbl.manitu.net, check_recipient_access hash:/etc/postfix/filtered_d

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Jorey Bump [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 6:09 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > > I don't think anyone can argue that these numbers are not t

Re: Finally blocking some spam

2008-10-13 Thread Aaron Wolfe
On Mon, Oct 13, 2008 at 6:22 PM, Joey <[EMAIL PROTECTED]> wrote: > >> -Original Message- >> From: Aaron Wolfe [mailto:[EMAIL PROTECTED] >> Sent: Monday, October 13, 2008 5:56 PM >> To: Joey >> Cc: postfix-users@postfix.org >> Subject: Re: Fina

Re: Finally blocking some spam

2008-10-13 Thread Aaron Wolfe
On Mon, Oct 13, 2008 at 6:05 PM, Justin Piszcz <[EMAIL PROTECTED]> wrote: > > > On Mon, 13 Oct 2008, Joey wrote: > >>> -Original Message- >>> From: Justin Piszcz [mailto:[EMAIL PROTECTED] >>> Sent: Monday, October 13, 2008 5:37 PM >>>

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Aaron Wolfe [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 5:56 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > you might want to consider the invaluement Anti-Spam DNSBL > h

Re: Finally blocking some spam

2008-10-13 Thread Jorey Bump
Joey wrote, at 10/13/2008 05:10 PM: > I can only tell you that in 4 days we have blocked at the firewall level ( > on only 1 server ) > 161,166 connections from Poland > 1,184,747 connections from Turkey > 418,162 connections from Russia > 53,656 connections from Czech > 1,613,636 connections from

RE: Finally blocking some spam

2008-10-13 Thread Justin Piszcz
On Mon, 13 Oct 2008, Joey wrote: -Original Message- From: Justin Piszcz [mailto:[EMAIL PROTECTED] Sent: Monday, October 13, 2008 5:37 PM To: Joey Subject: RE: Finally blocking some spam What anti-spam measurements do you currently use? What does your main.cf look like? (Snip

Re: Finally blocking some spam

2008-10-13 Thread Gerard
On Mon, 13 Oct 2008 14:31:54 -0700 (PDT) "Daniel V. Reinhardt" <[EMAIL PROTECTED]> wrote: >Im from the US, and i do not get that 403. I am in the US, and I am receiving a '403' error. -- Gerard [EMAIL PROTECTED] TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail TO (UN)SUBSC

Re: Finally blocking some spam

2008-10-13 Thread Noel Jones
Joey wrote: The best list I have found is http://www.okean.com/ which is only known spammers from those countries. I don't see anywhere on that web site that they claim to list only spammers. In fact, they claim to list *all* Chinese and Korean IP network blocks. If you want to block al

Re: Finally blocking some spam

2008-10-13 Thread Aaron Wolfe
On Mon, Oct 13, 2008 at 5:53 PM, Joey <[EMAIL PROTECTED]> wrote: >> -Original Message- >> From: Justin Piszcz [mailto:[EMAIL PROTECTED] >> Sent: Monday, October 13, 2008 5:37 PM >> To: Joey >> Subject: RE: Finally blocking some spam >> >>

Re: Finally blocking some spam

2008-10-13 Thread Daniel V. Reinhardt
postfix.org Sent: Monday, October 13, 2008 9:45:36 PM Subject: Re: Finally blocking some spam Daniel V. Reinhardt wrote: > > > Just to make sure I'm not crazy here, you can't get access to > http://www.okean.com ? > > Links to screenshots of what I see ( right now ) > ht

Re: Finally blocking some spam

2008-10-13 Thread Aaron Wolfe
On Mon, Oct 13, 2008 at 5:45 PM, J Sloan <[EMAIL PROTECTED]> wrote: > Daniel V. Reinhardt wrote: >> >> >> Just to make sure I'm not crazy here, you can't get access to >> http://www.okean.com ? >> >> Links to screenshots of what I see ( right now ) >> http://web56.net/images/download/screenshot1.jp

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Justin Piszcz [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 5:37 PM > To: Joey > Subject: RE: Finally blocking some spam > > What anti-spam measurements do you currently use? > > What does your main.cf look like?

Re: Finally blocking some spam

2008-10-13 Thread J Sloan
Daniel V. Reinhardt wrote: > > > Just to make sure I'm not crazy here, you can't get access to > http://www.okean.com ? > > Links to screenshots of what I see ( right now ) > http://web56.net/images/download/screenshot1.jpg > http://web56.net/images/download/screenshot2.jpg > That's interesting. I

Re: Finally blocking some spam

2008-10-13 Thread Neil
On Oct 13, 2008, at 17:35, Neil <[EMAIL PROTECTED]> wrote: On Oct 13, 2008, at 16:43, "Issac Kelly" <[EMAIL PROTECTED]> wrote: I agree that it doesn't make sense to ban an entire country, but what about banning an ISP that won't crack down on spammers? Then, if you're running a legit b

Re: Finally blocking some spam

2008-10-13 Thread Neil
On Oct 13, 2008, at 16:43, "Issac Kelly" <[EMAIL PROTECTED]> wrote: I agree that it doesn't make sense to ban an entire country, but what about banning an ISP that won't crack down on spammers? Then, if you're running a legit business, don't work with ISPs that have lax rules, and everybody

Re: Finally blocking some spam

2008-10-13 Thread Daniel V. Reinhardt
ct: RE: Finally blocking some spam > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of J Sloan > Sent: Monday, October 13, 2008 5:20 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > mouss wrote: > >

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Charles Marcus > Sent: Monday, October 13, 2008 5:28 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > On 10/13/2008, Joey ([EMAIL PROTECTE

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of J Sloan > Sent: Monday, October 13, 2008 5:20 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > mouss wrote: > > Joey a écrit : > >

Re: Finally blocking some spam

2008-10-13 Thread Charles Marcus
On 10/13/2008, Joey ([EMAIL PROTECTED]) wrote: > Somewhere government ( which I dont want them to control, but is the > only one that can step in ) has to step in and setup hard and fast > laws and rules based on a committee of knowledgable people ( Wietse > etc ) to create a system which requires

Re: Finally blocking some spam

2008-10-13 Thread J Sloan
mouss wrote: > Joey a écrit : > >> One thing I didn't think of on this, is that the list from spamhaus will be >> the same I am already rejecting via RBL and while it is local, it would >> still not include all the IP's I am using from these other heavy spam >> countries. >> > > > you can b

RE: Finally blocking some spam

2008-10-13 Thread Joey
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Issac Kelly Sent: Monday, October 13, 2008 4:44 PM To: postfix-users@postfix.org Subject: Re: Finally blocking some spam I agree that it doesn't make sense to ban an entire country, but what about banning an ISP that won't

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of mouss > Sent: Monday, October 13, 2008 4:43 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey a écrit : > > > > One thing I didn&

Re: Finally blocking some spam

2008-10-13 Thread Olivier MJ Crepin-Leblond
Joey said: I would like to know everyone's techniques... but yes there goes that completive advantage you mentioned. I get no spam whatsoever (zero, nil, zip) because my mailer rejects email from *all* countries. :-) Seriously, rejecting emails from a complete country is overkill. Might kil

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of mouss > Sent: Monday, October 13, 2008 4:34 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey a écrit : > >> -Original Message

Re: Finally blocking some spam

2008-10-13 Thread Daniel V. Reinhardt
TED]> To: Joey <[EMAIL PROTECTED]> Cc: postfix-users@postfix.org Sent: Monday, October 13, 2008 8:24:45 PM Subject: Re: Finally blocking some spam Joey wrote, at 10/13/2008 03:50 PM: > You feel like we are doing you a disservice unintentionally because we may > be blocking your IP, b

Re: Finally blocking some spam

2008-10-13 Thread Issac Kelly
I agree that it doesn't make sense to ban an entire country, but what about banning an ISP that won't crack down on spammers? Then, if you're running a legit business, don't work with ISPs that have lax rules, and everybody is happy, no? --issac kelly

Re: Finally blocking some spam

2008-10-13 Thread mouss
Joey a écrit : > > One thing I didn't think of on this, is that the list from spamhaus will be > the same I am already rejecting via RBL and while it is local, it would > still not include all the IP's I am using from these other heavy spam > countries. you can build your own "reputation list".

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Jorey Bump [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 4:25 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey wrote, at 10/13/2008 03:50 PM: > > > You feel l

RE: Finally blocking some spam

2008-10-13 Thread Joey
> > > On 13 Oct 2008, at 15:00, Joey wrote: > >> Joey wrote, at 10/13/2008 01:42 PM: > >> > >> Many school and government sites (not to mention China) can't seem to > >> configure rDNS and FCrDNS properly. I have given up trying to contact > >> offending sites. Too often, they decide the solution

Re: Finally blocking some spam

2008-10-13 Thread mouss
Joey a écrit : >> -Original Message- >> From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] >> On Behalf Of Zbigniew Szalbot >> Sent: Monday, October 13, 2008 12:06 PM >> To: Postfix users >> Subject: Re: Finally blocking some spam >> >>&g

Re: Finally blocking some spam

2008-10-13 Thread Jorey Bump
Joey wrote, at 10/13/2008 03:50 PM: > You feel like we are doing you a disservice unintentionally because we may > be blocking your IP, but in reality the other people in Poland who are > exploiting the internet are to blame. :( Glass houses... It may be true that your users can afford to give Po

Re: Finally blocking some spam

2008-10-13 Thread Neil
On 13 Oct 2008, at 15:00, Joey wrote: Joey wrote, at 10/13/2008 01:42 PM: Many school and government sites (not to mention China) can't seem to configure rDNS and FCrDNS properly. I have given up trying to contact offending sites. Too often, they decide the solution is simply to drop the rec

Re: Finally blocking some spam

2008-10-13 Thread Nikita Kipriyanov
Joey wrote: I have at this point had NO false positives and have seen in my own personal spam a reduction of 90%. You will never see any false positives - those who aren't spammers simply think that your server gone away, even they aren't able to say to you anything... This method won't be

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Zbigniew Szalbot > Sent: Monday, October 13, 2008 12:06 PM > To: Postfix users > Subject: Re: Finally blocking some spam > > > I am still using spamhaus at the RBL leve

RE: Finally blocking some spam

2008-10-13 Thread Joey
> Sent: Monday, October 13, 2008 12:54 PM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > >> A spamhaus data feed for 1-5,000 commercial users is $1850/year... You > >> really should consider subscribing, rather than fighting

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Jorey Bump [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 2:35 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey wrote, at 10/13/2008 01:42 PM: > > > You reach a poin

Re: Finally blocking some spam

2008-10-13 Thread Jorey Bump
Joey wrote, at 10/13/2008 01:42 PM: > You reach a point where the money we think we are profiting from > services sucks up all our time and resources and somehow we have to > reduce that overhead and SPAM. Imagine that we are blocking millions > of spam messages a month through various methods and

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: Jorey Bump [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 12:51 PM > To: Joey > Cc: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > Joey wrote, at 10/13/2008 11:57 AM: > > > For us greylisti

Re: Finally blocking some spam

2008-10-13 Thread mouss
Joey a écrit : >> -Original Message- >> From: [EMAIL PROTECTED] >> > [mailto:[EMAIL PROTECTED] > >> On Behalf Of Victor Duchovni >> Sent: Monday, October 13, 2008 11:38 AM >> To: postfix-users@postfix.org >> Subject: Re: Finally blo

Re: Finally blocking some spam

2008-10-13 Thread Jorey Bump
Joey wrote, at 10/13/2008 11:57 AM: > For us greylisting was a problem because it put a big delay on email when you > were sitting waiting for a message from someone you were talking to, but that > catches A LOT of email. Consider Nolisting. It doesn't have the delay associated with greylisting

Re: Finally blocking some spam

2008-10-13 Thread Zbigniew Szalbot
> I am still using spamhaus at the RBL level wouldn't that be the same? > I am trying to reduce overhead by getting it at the point of connection at > the firewall level. We run a large subscription service. It happens that our server is located in Poland. Thanks to your policy, your users won't b

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Victor Duchovni > Sent: Monday, October 13, 2008 11:38 AM > To: postfix-users@postfix.org > Subject: Re: Finally blocking some spam > > On Mon, Oct 13, 2008 at 11:3

RE: Finally blocking some spam

2008-10-13 Thread Joey
> -Original Message- > From: chteh [mailto:[EMAIL PROTECTED] > Sent: Monday, October 13, 2008 11:38 AM > To: Joey > Subject: Re: Finally blocking some spam > > Dear Joey, > > Thanks for your email, I am running 3 postfix mail servers too in our > research l

Re: Finally blocking some spam

2008-10-13 Thread Victor Duchovni
On Mon, Oct 13, 2008 at 11:33:15AM -0400, Joey wrote: > Hello All, > > > > I just wanted to share my success with you guys. I have been on the list > for many years running 3 postfix servers. We don't have a lot of clients, > but enough to warrant millions of connections a month by spammers.

Finally blocking some spam

2008-10-13 Thread Joey
Hello All, I just wanted to share my success with you guys. I have been on the list for many years running 3 postfix servers. We don't have a lot of clients, but enough to warrant millions of connections a month by spammers. I have been using the RBL's along with other methods but we still g