Topic: spam blocking suggestions

[Max]

I am preparing a new mail server running 5.6 and I would like some suggestions as to what to use to block spam.

I am planning on installing GeCad's RAV antivirus for qmail and it has a both a RBL and WBL portions I can turn on, but I am wondering if anyone has an easy to install and use package that they really like?

Thanks,

Max

[Cyrus Bharda]

Max,

Darrell May has wonderfully packaged RAV and made the appropriate server-manager panel for ease of setup and use, you will have to contact him to be able to download a time limited version though (helpdesk@myezserver.com).

I have not used any other packages as RAV does the job wonderfully! But spamassasin seems to be a good choice from what I have read about it on these fourms, just do a search and there's heaps of info on it.

Hope that helps,

Cyrus Bharda

http://wiki.contribs.org/

[ADSERG]

Hi Max

I went to Dungog.net and pulled down TMDA, Lets you create global Black/White lists or you simply can have user lists all with there own Black/White lists. Depends on how severe your spam problem is. Ours isnt that bad so we have it setup for just 2 users.

We use it here it's worked fine no probs, Tried it on 5.1.2 & 5.6.

Regards

Adserg

[Steve Bush]

I use Charlie Brady's contrib:
ftp://ftp.e-smith.org/pub/e-smith/contrib/CharlieBrady/RPMS/noarch/e-smith-mailfront-1.0.0-02rbl.noarch.rpm

This works with SME5.6U4.
I modified the rbl lists that it uses:
The file I modified was:
/var/service/smtpfront-qmail/rblsmtpd.conf

Mine contains:
RBLARGS="$RBLARGS -b -C -r list.dsbl.org -r sbl.spamhaus.org -r bl.spamcop.net -
r relays.osirusoft.com -r spews.relays.osirusoft.com"

I see quite a bit of spam being blocked.
You can see what's blocked by using the following command:
more /var/log/smtpfront-qmail/current |grep rblsmtpd

Good Luck

[Bill Talcott]

Steve Bush wrote:
>
> I use Charlie Brady's contrib:
> ftp://ftp.e-smith.org/pub/e-smith/contrib/CharlieBrady/RPMS/noarch/e-smith-mailfront-1.0.0-02rbl.noarch.rpm
>
> This works with SME5.6U4.
> I modified the rbl lists that it uses:
> The file I modified was:
> /var/service/smtpfront-qmail/rblsmtpd.conf
>
> Mine contains:
> RBLARGS="$RBLARGS -b -C -r list.dsbl.org -r sbl.spamhaus.org
> -r bl.spamcop.net -
> r relays.osirusoft.com -r spews.relays.osirusoft.com"
>
> I see quite a bit of spam being blocked.
> You can see what's blocked by using the following command:
> more /var/log/smtpfront-qmail/current |grep rblsmtpd
>
> Good Luck

I forced this onto 5.5 with an updated version of mailfront as well. I'm currently using only sbl.spamhaus.org and ril.habeas.com (proven to have violated the Habeas contract about not spamming) because I've personally had valid sites come up on the others. I've asked a few other employees, and they say they get virtually no spam. I'm not a big fan of huge blacklists controlled by someone else, so my advice is to start small rather than blocking half the internet. You can also use "-a sa.bondedsender.org" for allowing known good connections.

Also, I copied the default rblsmtpd.conf into /etc/e-smith/templates/var/service/smtpfront-qmail/rblsmtpd.conf/10default and put my changes into /etc/e-smith/templates-custom/var/service/smtpfront-qmail/rblsmtpd.conf/10default. Obviously not the best way to template things (Charlie said it would be easy to add a db for a list of RBLs), but this way I can easily undo my changes if I screw something up.

[Max]

Thanks everyone for all the help.
I am putting the new mail server in tonight, it has Darrell May's RAV for qmail + spam blocking package installed. And I am going to go with some of your suggestions on what servers to use for the RBL list.

Much Thanks,

Max