Re: [cobalt-developers] Adding spam blacklists to sendmail on aCobalt server

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

JL> Date: Mon, 21 Apr 2003 09:44:06 -0700
JL> From: Jeff Lasman


JL> My experience has been that using Bayesian filters results in
JL> two problems; one a system problem, and the other a user
JL> problem:

[ snip ]

Yes, Bayesian filters use more resources... but we've had better
luck than blacklists.  YMMV, of course. :-)  We'll probably
eventually run an internal blacklist automatically generated by
BMF.

FWIW, hardware is cheap enough that Bayesian filters are very
reasonable.  My non-optimized XML/HTML-ish parser uses about 16
clock cycles per input character under "typical" use... I need to
review the Bayes algorithm, but I don't expect the parsing and
lookup to be _too_ different.


JL> We tell our clients how we filter spam.  We're implementing

Always a good thing.


JL> now for ourselves and all our customers, a page to send
JL> people to, which explains why their email got bounced, so

Good to do.


JL> One of our clients successfully refuses about 500 pieces of
JL> spam a day on his own server, using spamcop, spamhaus, and

!!!


JL> > I also recommend blacklist users maintain a whitelist.
JL>
JL> I agree but I've not been successful in implementing one; do
JL> you have any clues/suggestions?

I'd have to look back... I made some local mods to sendmail.cf a
few years back...

In short, create a lookup list of IP addresses.  Reference the
list in one of the rules; in case of a match, return success
before even checking the blacklists.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.