Vivek Khera said: > >>>>> "DWM" == Darren W McClung <McClung> writes: > DWM> I wish. In the last week, out of 4,816 messages, 2,744 (56%) > DWM> were spam, and I've blocked a good number of the problem > DWM> mailservers (*.colonize.com) at the firewall.
It sounds like the volume has gone up a lot, even in the last few months. Quite a few organisations I've heard from recently have noted that the spam load on their mail feed is now > 50% -- ie. now there's more spam than nonspam! > I have found that using a relays and proxy server block list at the > SMTP level (ie, refusing mail from open relays and open proxies) cuts > down the number of messages that SA needs to scan, greatly reducing > the load on my filtering box. > I've had exactly zero FP's with proxies.relays.monkeys.org open proxy > list (in use for about 2 months), and about 2 or 3 FP's with > relays.ordb.org (in use since MAPS went "private"). proxies.relays.monkeys.org is supposed to be pretty good, alright; I haven't yet put it into the default config but it sounds worth it. Also recommended for front-line outright blocks are opm.blitzed.org and sbl.spamhaus.org. --j. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
