Re: [cobalt-users] [Maybe OT] Anti-spam measures [SCANNED]

["PageKeeper Service" <host@xxxxxxxxxxxxxxxxxxxxx>]

----- Original Message -----
From: "Dave's List Addy" <listonly@xxxxxxxxxxxxxxxxxxxx>
To: "Users" <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Thursday, March 11, 2004 8:10 AM
Subject: Re: [cobalt-users] [Maybe OT] Anti-spam measures [SCANNED]


> On 3/11/04 7:39 AM, "Head, Don" wrote:
>
> >
> > I think that most administrators receiving large amounts of spam have
> > realized that it pays to have a little dedicated spam filtering box
> > acting as your MX, which then hands the acceptable mail off to your RaQ
> > (or other primary mail server).  Anyone who is having problems with mail
> > overload who hasn't done this should seriously consider it. =)
>
> Don
>
> This is what we ended up doing to help relieve the Raq's of all the
unwanted
> mail.
>
> We use a gateway to filter and actually delete the high scoring spam and
> don't bother delivering the virus alerts. Just more noise.
> --
> Thanks!!
> David Thurman
> List Only at Web Presence Group Net
>

I agree with dan on the spam.
Still working on a dynamic way to block offenders on a stock raq. Results
have been good so far.
But little time right now to complete the project.
This now uses logtail and logcheck to help add or remove offending IP
numbers to ipchains.
It can also use the route program to block. Or block directly from the
command line easly.
Right now I'm testing on a 7 day cycle. (it unblocks the offending ip in 7
days). 24hrs is not enough.
http://www.pagekeeperservice.com/sysinfo/blocked.pl?cobalt-users

  David Hahn
  PageKeeper Service
  http://www.pagekeeperservice.com