Re: Lots of Polish spam

[Reindl Harald]

Am 24.02.2015 um 19:15 schrieb Yves Goergen:

Am 24.02.2015 um 19:02 schrieb Reindl Harald:

RBL's long before the contentfilter!

Do you mean to reject messages as soon as a single RBL triggers it?
That's definitely not what I want to do! I've had way too much trouble
with others doing that. RBLs get points and the score decides. Never let
any single check decide alone.

re-read my message again and try to understand it

this is *not* a single check
this is *scoring*

postscreen_dnsbl_ttl = 5m
postscreen_dnsbl_threshold = 8
postscreen_dnsbl_action = enforce
(...)

What is that?

Google would have leaded to
http://www.postfix.org/POSTSCREEN_README.html

    b.barracudacentral.org=127.0.0.2*7
    zen.spamhaus.org=127.0.0.[10;11]*8
    zen.spamhaus.org=127.0.0.[4..7]*6
    zen.spamhaus.org=127.0.0.3*4
    zen.spamhaus.org=127.0.0.2*3

These are evil...

really?
maybe you should qualify tips *after* you understood "What is that?"

* the reject score is 8
* "b.barracudacentral.org=127.0.0.2*7" has 7 points
* zen.spamhaus.org with response 127.0.0.10 or 127.0.0.11 is PBL
* zen.spamhaus.org with repsonse 127.0.0.4-127.0.0.7 is XBL
* zen.spamhaus.org with response 127.0.0.3 is CSS and only 4 points
* zen.spamhaus.org with repsonse 127.0.0.2 is SBL and only 3 points
* you missed the DNSWL's with negative scores completly
___________________________________________________

AGAIN: that is a score-based reject including a ton of whitelists

postscreen_dnsbl_ttl = 5m
postscreen_dnsbl_threshold = 8
postscreen_dnsbl_action = enforce
postscreen_greet_action = enforce
postscreen_dnsbl_sites =
  b.barracudacentral.org=127.0.0.2*7
  dnsbl.inps.de=127.0.0.2*7
  bl.mailspike.net=127.0.0.2*5
  bl.mailspike.net=127.0.0.[10;11;12]*4
  dnsbl.sorbs.net=127.0.0.10*8
  dnsbl.sorbs.net=127.0.0.5*6
  dnsbl.sorbs.net=127.0.0.7*3
  dnsbl.sorbs.net=127.0.0.8*2
  dnsbl.sorbs.net=127.0.0.6*2
  dnsbl.sorbs.net=127.0.0.9*2
  zen.spamhaus.org=127.0.0.[10;11]*8
  zen.spamhaus.org=127.0.0.[4..7]*6
  zen.spamhaus.org=127.0.0.3*4
  zen.spamhaus.org=127.0.0.2*3
  hostkarma.junkemailfilter.com=127.0.0.2*3
  hostkarma.junkemailfilter.com=127.0.0.4*1
  hostkarma.junkemailfilter.com=127.0.1.2*1
  wl.mailspike.net=127.0.0.[18;19;20]*-2
  list.dnswl.org=127.0.[0..255].0*-2
  list.dnswl.org=127.0.[0..255].1*-3
  list.dnswl.org=127.0.[0..255].2*-4
  list.dnswl.org=127.0.[0..255].3*-5
  hostkarma.junkemailfilter.com=127.0.0.1*-2

signature.asc
Description: OpenPGP digital signature