Hello on the list I am using suse 9.3 with postfixand spamassasing, but i get a lot of spam anyway. Does anybody know how to stop mail from .biz? And I want to stop mail who have an URL for .biz Thanks in advance /tage
Tage Danielsen wrote:
I am using suse 9.3 with postfixand spamassasing, but i get a lot of spam anyway.
Does anybody know how to stop mail from .biz?
Hej Tage, For stopping mails coming from a server with a .biz domain-name, you can use a postfix method - check_client_access. For mails with a From:-address of <something>.biz, you could use postfix' header_checks.
And I want to stop mail who have an URL for .biz
I think you'll have to write a custom spamassassin rule for that. /Per Jessen, Zürich -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Monday 31 July 2006 15:41, Per Jessen wrote:
And I want to stop mail who have an URL for .biz
I think you'll have to write a custom spamassassin rule for that.
Or a procmail recipe. -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Mon, 2006-07-31 at 15:50 -0400, Bruce Marshall wrote:
On Monday 31 July 2006 15:41, Per Jessen wrote:
And I want to stop mail who have an URL for .biz
I think you'll have to write a custom spamassassin rule for that.
Or a procmail recipe.
Or simply add a line to /etc/postfix/access to deny access: .biz reject and issue the postmap /etc/postfix/access command. This will stop them from even getting in the door. -- Ken Schneider UNIX since 1989, linux since 1994, SuSE since 1998 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
Thanks I have added this line now, and I think I found some body check for URL in mail from biz I will be back later Thanks /Tage *************************************************************** -----Oprindelig meddelelse----- Fra: Ken Schneider [mailto:suse-list2@bout-tyme.net] Sendt: 31. juli 2006 22:13 Til: suse-linux-e@suse.com Emne: Re: [SLE] spam On Mon, 2006-07-31 at 15:50 -0400, Bruce Marshall wrote:
On Monday 31 July 2006 15:41, Per Jessen wrote:
And I want to stop mail who have an URL for .biz
I think you'll have to write a custom spamassassin rule for that.
Or a procmail recipe.
Or simply add a line to /etc/postfix/access to deny access: .biz reject and issue the postmap /etc/postfix/access command. This will stop them from even getting in the door. -- Ken Schneider UNIX since 1989, linux since 1994, SuSE since 1998 -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Monday 31 July 2006 16:13, Ken Schneider wrote:
I think you'll have to write a custom spamassassin rule for that.
Or a procmail recipe.
Or simply add a line to /etc/postfix/access to deny access:
.biz reject
and issue the postmap /etc/postfix/access command.
This will stop them from even getting in the door.
Aren't you assuming here that he is running his own mailserver? I didn't understand it that way (he didn't say). -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
Ken Schneider wrote:
Or simply add a line to /etc/postfix/access to deny access:
.biz reject and issue the postmap /etc/postfix/access command.
This will stop them from even getting in the door.
But that's not all Tage was after - he really wanted to stop emails where '.biz' was present in the body. A fairly crude approach would be a simple postfix body_check: /\.biz\// DISCARD /Per Jessen, Zürich
On Monday 31 July 2006 15:36, Tage Danielsen wrote:
Hello on the list
I am using suse 9.3 with postfixand spamassasing, but i get a lot of spam anyway.
Does anybody know how to stop mail from .biz?
And I want to stop mail who have an URL for .biz
Thanks in advance
Not sure how SuSE implements spamassassin (I use DSPAM) but you really need to do some procmailrc processing to throw away the spam. Otherwise, it will just be marked as spam and passed on to the user. Can you tell us more about how your incoming mail is processed? using fetchmail? procmail? who is doing the POP? -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
From: "Tage Danielsen"
Hello on the list
I am using suse 9.3 with postfixand spamassasing, but i get a lot of spam anyway.
Does anybody know how to stop mail from .biz?
And I want to stop mail who have an URL for .biz
Thanks in advance
The initial thing to investigate is http://www.rulesemporium.com/. Select the "rules" tab and read about their various sets of rules. Pick and choose those which seem to fit your needs best and add them to /etc/mail/spamassassin/ along with your "local.cf" file. Right up at the top there is a link to the automatic updater for non-SA native rule sets, RulesDuJour. The second thing to investigate is how well your BAYES is going to work. As is usual for distros these days SUSE has not distributed the whole SpamAssassin package. You don't have the tools present, most likely. Some of them are nice. But there is a variant for the tools "sa-stats.pl" which gathers statistics from the logs that is better investigating behavior of rule sets. It's hidden away on the site above at: http://www.rulesemporium.com/programs/sa-stats.txt Download it and rename it to sa-stats.pl. A quick look comes from just running it. It'll process the current maillog. If you use "sa-stats.pl -n 2000 -f maillog*" it will process all maillogs and give you the top 2000 rules that have gotten hit. The BAYES_99 rule should top out the spam rules that "hit" on your system. And it should have VERY few hits on ham. (Mine is running 84% of what gets ultimately marked as spam and 0.04% of what ultimately gets marked as ham - although I've never noticed a ham that was marked as spam that included the BAYES_99 markup even though I have stepwise escallated the score for BAYES_99 up to the spam threshold of 5.0. I bumped it up and watched for ham with BAYES_99. Then I bumped it up more. I figured to stop at 5.0, though.) As it happens I hand train BAYES here because that is practical for the two people involved. (My partner writes some of the SARE rules.) In some cases automatic training can actually do better. And in others it can get off on a wrong foot and be a disaster. I recommend widening the automatic learn thresholds a little. That helps. {^_^} Joanne -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
participants (5)
-
Bruce Marshall -
jdow -
Ken Schneider -
Per Jessen -
Tage Danielsen