Still allot of spam :(

Tweak

Verified User
Joined
May 15, 2009
Messages
23
Some time ago i installed Spamblocker 3? and it filtered allot of spam.. but since a while i get allot mails like "buy a V.I.P Watch at a very low price" is there anything to do about it? so i already use Spamblocker and spamassassin. when you install spamassassin you need to config some things (its asking some questions) is it possible i did something wrong there?

web1:~# cat /var/log/exim/mainlog | grep "Buy a"
2009-07-16 09:25:59 1MRLLq-0005iO-C6 <= [email protected] H=(JROUOFWK) [123.22.13.209] P=esmtp S=2015 id=000d01ca05e7$570a7d90$6400a8c0@lusher763 T="Buy a V.I.P. watch at a very low price." from <[email protected]> for .... ... ..... ...
2009-07-16 09:26:09 1MRLLr-0005jQ-BN <= [email protected] U=mail P=spam-scanned S=2404 id=000d01ca05e7$570a7d90$6400a8c0@lusher763 T="Buy a V.I.P. watch at a very low price." from <[email protected]> for ... ... ... ...
2009-07-16 16:28:44 1MRRwx-0004io-6p <= [email protected] H=(SERVER) [41.201.217.54] P=esmtp S=1993 id=000d01ca0622$66faaf00$6400a8c0@dartingdp3 T="Buy a V.I.P. watch at a very low price." from <[email protected]> for ......
2009-07-16 16:28:50 1MRRwy-0004jd-9R <= [email protected] U=mail P=spam-scanned S=2387 id=000d01ca0622$66faaf00$6400a8c0@dartingdp3 T="Buy a V.I.P. watch at a very low price." from <[email protected]> for ..... ..... .....

etc

i see in the log allot of spam is filtered by spamblocker but not all..

if there is no "free" solution is there some spam filter i can buy and install on DA?
 
SpamAssassin can block spam based on content; it's also included in the SpamBlocker exim.conf file but it has to be installed. It can be expensive (in terms of resource use); I recommend you only use it once SpamBlocker is turned on for all domains.

DirectAdmin also has Spam Filters, which are a bit less expensive (again, in terms of resource use).

We use all three.

The new version of SpamBlocker (3.2) is almost ready for release candidate; it's a lot better.

But spammers are getting better, too.

For what it's worth, I've already tried catching IP#s for all spam that makes it through all my filtering, for a week, and then checked the list for duplicates. It turns out that it's a waste of time to block all IP#s that have already sent you spam; most spam these days is sent by bots. In a whole week we didn't get more than 15 IP#s (out of hundreds) which were used more than once, and they were generally used a few minutes apart, before we could have got them into a blocklist.

:(

Jeff
 
The RC is coming out today; it appears to work very well for me. The announcement will be made on these forums. If and when DirectAdmin staff approves it and integrates it into DirectAdmin it will be announced on the DirectAdmin users list.

Jeff
 
Back
Top