[afnog] Fighting SPAM

Tue Sep 9 05:22:26 UTC 2008

FYI:

NSP is organizing a 2-days Hands-on workshop on "Network Security" in
Karachi on Oct 7th and 8th at Sheraton Hotel, Karachi. Details below:

Topic:      Network Security

Instructor: Yusuf Bhaiji - CCIE #9305, (R&S & Security).

For online registration & details please log on to
http://www.nsp.org.pk/nspWork/nspWorkshops.php

For Workshop Details please log on to

http://www.nsp.org.pk/nspWork/workshopDetails.php

Contact Persons:

1- M.Nadeem         Email: mnadeem at nsp.org.pk Cell# 0300-2128919.

2- Ashar ul Hassan. Email: ashar at nsp.org.pk   Cell# 0300-2448542. 

Thanks

NSP Program Committee

Networkers' Society of Pakistan.

www.nsp.org.pk

  _____  

From: afnog-bounces at afnog.org [mailto:afnog-bounces at afnog.org] On Behalf Of
Maina Noah
Sent: Monday, September 08, 2008 3:26 PM
To: Noah K Sematimba
Cc: afnog at afnog.org
Subject: Re: [afnog] Fighting SPAM

Hi Sematimba,

thanks for the recommendation. Rob Borland and Elly have also recommended
the same and i have already complied and implemented MailScanner. 

However i was getting the following output in the /var/log/mailog file. Also
the mailq and postques -p outputs show that somewhat emails are being
blocked/ delayed at www.spamcop.net

[postmaster at email ~]# postqueue -p
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
CE6672D78134!    1083 Sat Sep  6 15:01:49  PhilipcougarFlores at rpmlenders.com
                                         dsekimanga at ncc.or.tz
                                         criwa at ncc.or.tz

591022D78131!     913 Mon Sep  6 14:57:54  AlanfredholmLong at cremaster.net
                                         kmsita at ncc.or.tz
                                         wmwambura at ncc.or.tz
                                         tlemunge at ncc.or.tz
 <mailto:kmsita at ncc.or.tz> 

[postmaster at email ~]# /etc/init.d/MailScanner reload
Reloading MailScanner workers:
         MailScanner:                                      [  OK  ]
    Outgoing postfix:                                      [  OK  ]

[postmaster at email ~]# tail -f -n 0 /var/log/maillog
Sep  6 16:01:49 email MailScanner[3394]: MailScanner E-Mail Virus Scanner
version 4.71.10 starting...
Sep  6 16:01:49 email MailScanner[3394]: Read 830 hostnames from the
phishing whitelist
Sep  6 16:01:49 email MailScanner[3394]: Read 5566 hostnames from the
phishing blacklist
Sep  6 16:01:49 email MailScanner[3394]: SpamAssassin temporary working
directory is /tmp
Sep  6 16:01:50 email MailScanner[3394]: Using SpamAssassin results cache
Sep  6 16:01:50 email MailScanner[3394]: Connected to SpamAssassin cache
database
Sep  6 16:01:50 email MailScanner[3394]: Enabling SpamAssassin
auto-whitelist functionality...
Sep  6 16:01:50 email MailScanner[3394]: Using locktype = flock
Sep  6 16:01:52 email postfix/smtpd[3395]: connect from
unknown[62.41.198.82]
Sep  6 16:01:54 email MailScanner[3401]: MailScanner E-Mail Virus Scanner
version 4.71.10 starting...
Sep  6 16:01:54 email MailScanner[3401]: Read 830 hostnames from the
phishing whitelist
Sep  6 16:01:54 email MailScanner[3401]: Read 5566 hostnames from the
phishing blacklist
Sep  6 16:01:54 email MailScanner[3401]: SpamAssassin temporary working
directory is /tmp
Sep  6 16:01:55 email MailScanner[3401]: Using SpamAssassin results cache
Sep  6 16:01:55 email MailScanner[3401]: Connected to SpamAssassin cache
database
Sep  6 16:01:55 email MailScanner[3401]: Enabling SpamAssassin
auto-whitelist functionality...
Sep  6 16:01:55 email postfix/smtpd[3395]: NOQUEUE: reject: RCPT from
unknown[62.41.198.82]: 554 5.7.1 Service unavailable; Client host
[62.41.198.82] blocked using bl.spamcop.net <http://bl.spamcop.net/> ;
Blocked - see http://www.spamcop.net/bl.shtml?62.41.198.82;
from=<Espen-aminata at Arentfox.com> to=<rkasulwa at ncc.or.tz> proto=ESMTP
helo=<[62.41.198.82]>
Sep  6 16:01:55 email MailScanner[3401]: Using locktype = flock

Any ideas why.

rergards

./noah

-------- Original Message --------
Subject: Re: [afnog] Fighting SPAM
From: "Noah K Sematimba" <ksemat at psg.com>
Date: Sun, September 07, 2008 3:57 pm
To: "Maina Noah" <mainanoah at ipexpertz.net>,"Phil Regnauld"
<regnauld at x0.dk>
Cc: afnog at afnog.org

I have found it easier to use mailscanner which integrates spamassassin,
clamav and any other AV you want in one tool and then scans all your
incoming and outgoing mail. There are howtos on the site for integrating it
with exim, postfix and sendmail. See http://www.mailscanner.info
<http://www.mailscanner.info/>  Noah. ( the other one) -------- Original
Message --------
> Subject: Re: [afnog] Fighting SPAM
> From: Phil Regnauld <regnauld at x0.dk>
> Date: Fri, September 05, 2008 4:40 am
> To: Stephane Bortzmeyer <bortzmeyer at nic.fr>
> Cc: Maina Noah <mainanoah at ipexpertz.net>, afnog at afnog.org
> 
> Stephane Bortzmeyer (bortzmeyer) writes:
> > On Fri, Sep 05, 2008 at 03:04:41AM -0700,
> > Maina Noah <mainanoah at ipexpertz.net> wrote 
> > a message of 85 lines which said:
> > 
> > > I have fine tuned spamassassin to the best of my knowledge and it
> > > seems to work fine however,
> > 
> > Indeed, it seems so, from the log you sent.
> > 
> > > i am not certain if it is really blocking spam emails all at.
> > 
> > SA never blocks spam. From the FAQ
> 
> If you want to block spam, then use something like amavisd-new
> http://www.ijs.si/software/amavisd/ or DSPAM
> http://dspam.nuclearelephant.com/
> 
> Amavisd-new does virus checking as well, and wraps SA as well as Dspam
> if necessary.
> 
> Phil
> 

-- 
Noah 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://afnog.org/pipermail/afnog/attachments/20080909/42a7ef47/attachment-0002.html>