-- Michael Scheidell, CTO >|SECNAP Network Security Winner 2008 Network Products Guide Hot Companies FreeBsd SpamAssassin Ports maintainer Charter member, ICSA labs anti-spam consortium > From: "Tuc at T-B-O-H.NET" <[EMAIL PROTECTED]> > Date: Sat, 8 Mar 2008 19:51:49 -0500 (EST) > To: Matus UHLAR - fantomas <[EMAIL PROTECTED]> > Cc: <users@spamassassin.apache.org> > Subject: Re: [spamassassin] Re: How to report 120,000 spams a day > >> >> On 08.03.08 18:28, Tuc at T-B-O-H wrote:
> > Thanks for the reply. > > I have a feeling that I'm not explaining myself well enough given > this and private replies I've received. > > I am mail hosting for a domain, we'll call it example.com . There > are, and have only been 4 VALID email addresses for example.com such as : > > [EMAIL PROTECTED] > [EMAIL PROTECTED] > [EMAIL PROTECTED] > [EMAIL PROTECTED] > > Those come in, get scanned by SA, and the ones we think are good > enough we pass along to the owners email address on his local ISP (Hughes.net, > who has their email processed by Tucows's securehostedemail.com that violates > RFC's and causes sendmail to pump out kernel based messages which I can't get > anyone there to listen to!). > > In the mean time, anything that isn't going to bingo, bango, bongo Then you need to enlist the paid services of an email consultant since you have things totally fsucked up and no amount of reporting is going to help you or your client, and no, 'the community' doesn't want more copies of the same zombot spam that we all get al day long. (and, sorry, abut 120,000 emails a day for 4 users? At, what, 99.99% spam ratio? Maybe if you started to drop the emails to unknown users it would never have gotten that bad) > or irving is sent straight to /dev/null from the MTA. Its these messages that > go straight to /dev/null that I'd like to somehow get processed into something Don't send them to dev null, don't accept them. By accepting them you are wasting bandwidth, and will waste it more trying to report it. > I thought DCC was running on this system, but it appears not. I'll > have to check why and get it running. I thought it was just another database > for SA to check, I'll have to read more about it. Thanks. At 120,000 per day, you are required to run a local DCC server, and running a local DCC server is the only way to process that much email. Trying to push 120,000 emails a day through the overburdened public servers will most likely, eventually get your ip address blacklisted, if it isn't already. _________________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(tm). For Information please see http://www.spammertrap.com _________________________________________________________________________
