Re: R: BIG increase in spam today

2006-11-13 Thread Jonas Eckerman
Federico Giannici wrote: What about combining BlackListing and GreyListing? I'm experimenting ab it with that right now. I've got my greylisting code to use a configurable number of checks before it decides if the greylist should be in use for an incoming connection. The idea is to avoid del

Re: R: BIG increase in spam today

2006-11-06 Thread Benny Pedersen
On Thu, November 2, 2006 17:03, Randy Smith wrote: > I use policyd and give my users the ability to optout (or optin depending on > the domain settings) of greylisting if they choose. They can do it through a > plugin in SquirrelMail so, if they choose, they can turn it off for a few > minutes to

Re: R: R: BIG increase in spam today

2006-11-05 Thread Benny Pedersen
On Fri, November 3, 2006 11:53, Giampaolo Tomassoni wrote: > Due to the dynamic nature of this test, I guess that at least in the postfix > case it should need to be somehow embedded into the greylisting server: it > seems postfix doesn't allow to specify more than one policy server in the > chec

R: R: BIG increase in spam today

2006-11-04 Thread Giampaolo Tomassoni
> Federico Giannici wrote: > > François Rousseau wrote: > >> Greylisting is not always good... > >> > >> The greylisting insert delay in delevery and sometimes the email have > >> to be delever fast. > > > > I don't trust enough DNSBLs to completely block an email only based on > > them. > > >

Re: R: BIG increase in spam today

2006-11-03 Thread Stuart Johnston
Federico Giannici wrote: François Rousseau wrote: Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast. I don't trust enough DNSBLs to completely block an email only based on them. What about combining BlackListing and

Re: R: BIG increase in spam today

2006-11-03 Thread Ken A
Federico Giannici wrote: François Rousseau wrote: Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast. I don't trust enough DNSBLs to completely block an email only based on them. What about combining BlackListing a

R: R: BIG increase in spam today

2006-11-03 Thread Giampaolo Tomassoni
> François Rousseau wrote: > > Greylisting is not always good... > > > > The greylisting insert delay in delevery and sometimes the > email have to > > be delever fast. > > I don't trust enough DNSBLs to completely block an email only > based on them. > > What about combining BlackListing an

Re: R: BIG increase in spam today

2006-11-03 Thread Federico Giannici
François Rousseau wrote: Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast. I don't trust enough DNSBLs to completely block an email only based on them. What about combining BlackListing and GreyListing? I'd like to us

Re: R: BIG increase in spam today

2006-11-02 Thread jdow
From: "Giampaolo Tomassoni" <[EMAIL PROTECTED]> Da: Marc Perkel [mailto:[EMAIL PROTECTED] What I do is sort of partial greylisting. If a connection is suspicious I give them a temp error on my lowest MX but accept them on higher MX records. So that way most MTA will try a higher MX right away an

R: R: BIG increase in spam today

2006-11-02 Thread Giampaolo Tomassoni
> Da: Marc Perkel [mailto:[EMAIL PROTECTED] > What I do is sort of partial greylisting. If a connection is suspicious > I give them a temp error on my lowest MX but accept them on higher MX > records. So that way most MTA will try a higher MX right away and it > doesn't add much of a delay. Wel

Re: R: BIG increase in spam today

2006-11-02 Thread John D. Hardin
On Thu, 2 Nov 2006, [ISO-8859-1] Fran?ois Rousseau wrote: > Greylisting is not always good... > > The greylisting insert delay in delevery and sometimes the email have to be > delever fast. > > For example: on some public wireless network, you have to register to have > access to the internet.

Re: R: BIG increase in spam today

2006-11-02 Thread Marc Perkel
What I do is sort of partial greylisting. If a connection is suspicious I give them a temp error on my lowest MX but accept them on higher MX records. So that way most MTA will try a higher MX right away and it doesn't add much of a delay. François Rousseau wrote: Greylisting is not always go

Re: R: BIG increase in spam today

2006-11-02 Thread Randy Smith
On Thursday 02 November 2006 08:42, François Rousseau wrote: > Greylisting is not always good... > > The greylisting insert delay in delevery and sometimes the email have to be > delever fast. > > For example: on some public wireless network, you have to register to have > access to the internet.

R: R: BIG increase in spam today

2006-11-02 Thread Giampaolo Tomassoni
  Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast.  For example: on some public wireless network, you have to register to have access to the internet.  You can access internet without authentification for 15

Re: R: BIG increase in spam today

2006-11-02 Thread François Rousseau
Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast.  For example: on some public wireless network, you have to register to have access to the internet.  You can access internet without authentification for 15 minutes.  In this

R: BIG increase in spam today

2006-11-02 Thread Giampaolo Tomassoni
> On 11/2/06, Debbie D <[EMAIL PROTECTED]> wrote: > > > > Yes Chris I did notice.. my server was attacked with spam yesterday > > morning.. it was coming from several different ip, so fast I > could not keep > > it quiet > > > > There's been a lot of chatter about this: > > http://it.slashdot.or

R: BIG increase in spam today

2006-11-02 Thread Giampaolo Tomassoni
> "Chris" <[EMAIL PROTECTED]> wrote in message > > >>I usually come home from work to find about 60-80 spam's in my spam > >>folder. > Today upon bringing up the mailer there were over 400! Looks like a large > bonnet attack or something. Has anyone else noticed this? I've > not finished > look