Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: Jáder on December 29, 2015, 11:39:40 AM

Title: fighting SPAM @ SME9: which howTo to follow ?
Post by: Jáder on December 29, 2015, 11:39:40 AM
I´ve migrate one SME8 to SME9 x64! Urra!

Now I´m moving anti SPAM measures... and cannot find a clear wiki text point which config to use.
I used to use this:
http://wiki.contribs.org/Learn
  but it now points to
http://www.sonoracomm.com/support/19-inet-support/49-spam-filter-configuration-for-sme-7

and both appears to be SME7.

I can try any and document it later on wiki, just do not wanna to mess with a new production serve without tips about where to start.

Regards.

Jáder
Title: Re: fighting SPAM @ SME9: which howTo to follow ?
Post by: guest22 on December 29, 2015, 02:29:03 PM
I'm sure you saw this page? http://wiki.contribs.org/Email
Title: Re: fighting SPAM @ SME9: which howTo to follow ?
Post by: Jáder on December 29, 2015, 05:28:34 PM
Yes RequestedDeletion, I did.

Just wanna to be sure all functions were moved there.
I wanna to use LEARN folders . It was a extra script before. Is this now default to standard SME ?
As a friend of mine once said: "Viagra propaganda is not spam to everyone" :)

Regards

Jáder
Title: Re: fighting SPAM @ SME9: which howTo to follow ?
Post by: mmccarn on December 31, 2015, 01:28:46 PM
While not directly related to spam fighting measures, I've been accumulating the tools I use to monitor mail server performance (including spam blocking) here:
http://wiki.contribs.org/Email_Statistics

Things I use that aren't specifically discussed in the Sonoracomm howto or included in the Learn contrib:

* SBLList
I recently discovered that with dbl.spamhaus.org included in the SBLList on my server, rhsbl consistently blocks 60% of the inbound emails on one server (but only 3.4% on another).

* check_badmailfrom_patterns (http://bugs.contribs.org/show_bug.cgi?id=9095)
Before discovering how effective dbl.spamhaus.org is on the server mentioned, I setup and configured check_badmailfrom_patterns to block top level domains that never sent the client any real email (.biz, .eu, .info, .faith, .cricket, .accountant, .xyz, etc).  this plugin still blocks some email (3.4%), but without dbl.spamhaus.org in the SBLList it was blocking almost 50% of inbound email deliveries.

* I've increased the default check_earlytalker (http://wiki.contribs.org/Qpsmtpd_check_earlytalker) delay from 1 second to 5 seconds. check_earlytalker is catching 7% of attempted deliveries to the spam-prone server mentioned earlier.

* I've added a custom template (http://bugs.contribs.org/show_bug.cgi?id=8484#c8) to allow support for A-record RBL lists (like b.barracudacentral.org).  On every server I've added it to, the b.barracudacentral.org list blocks more spam than any other service configured in my DNSBL settings.

* rbl-recheck.sh (http://bugs.contribs.org/show_bug.cgi?id=9110) will check recently received mail for one or all users, and identify messages that were delivered from servers that are now listed in your DNSBL services.  The messages identified can either be listed or moved into a new folder. 

* I make regular use of mxtoolbox (http://mxtoolbox.com/blacklists.aspx) to research obvious spam to find out why it wasn't blocked, and look for ways to block similar spam moving forward. This has led me to serveral aggressive but useful DNSBL services: ix.dnsbl.manitu.net, truncate.gbudb.net, bl.nosolicitado.org.  These services may block mid-size ISPs and are likely to require some whitelisting.
Title: Re: fighting SPAM @ SME9: which howTo to follow ?
Post by: Stefano on December 31, 2015, 01:37:06 PM
* I've added a custom template (http://bugs.contribs.org/show_bug.cgi?id=8484#c8) to allow support for A-record RBL lists (like b.barracudacentral.org).  On every server I've added it to, the b.barracudacentral.org list blocks more spam than any other service configured in my DNSBL settings.

Doh! I missed this one.. just trying it on a server of mine, will report back

Thank you

P.S. mmccarn, your last post should be wikified in some way IMO
Title: Re: fighting SPAM @ SME9: which howTo to follow ?
Post by: Stefano on December 31, 2015, 01:53:50 PM
I'd add also this one:

http://wiki.contribs.org/Clamav_unofficial_sigs
Title: Re: fighting SPAM @ SME9: which howTo to follow ?
Post by: ReetP on December 31, 2015, 02:07:45 PM
And geoip blocking is quite handy too

http://wiki.contribs.org/GeoIP