SpamAssasin users-- theres a problem at Osirusoft
I just came across this, maybe many of you havn't heard it yet. http://perlmonks.org/index.pl?node_id=286882 If you use Mail::SpamAssassin and the default configuration, and have enabled the default relay checks but disabled bayes testing, or you have tweaked your configuration so that you enabled the checks for Osirusoft under additional circumstances, you should take steps immediately to disable such checks. Apparently, after having been DDOS'ed, the Osirusoft people have "given up the ghost" and are now returning back every IP as a spam source when queried! or check http://slashdot.org/articles/03/08/27/0214238.shtml Osirusoft Blacklists The World -- I'm not really a human, but I play one on earth.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wednesday 27 August 2003 12:23 pm, zentara wrote:
If you use Mail::SpamAssassin and the default configuration, and have enabled the default relay checks but disabled bayes testing, or you have tweaked your configuration so that you enabled the checks for Osirusoft under additional circumstances, you should take steps immediately to disable such checks. Apparently, after having been DDOS'ed, the Osirusoft people have "given up the ghost" and are now returning back every IP as a spam source when queried!
If you're using SuSE's release of Postfix, you should also check out the /etc/sysconfig/postfix file. If you have spam protection on and you're using the example POSTFIX_RBL_HOSTS entry in that file, you need to remove relays.osirusoft.com from that list. I lost 63 emails on funktronics.ca before finding out that everything was blackholed. Fortunately, Postfix logged everything and I was able to recover all of the information from the senders. You should probably do the following to see what's been dropped: grep "Please stop using relays.osirusoft.com" /var/log/mail - -- James Oakley Engineering - SolutionInc Ltd. joakley@solutioninc.com http://www.solutioninc.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) iD8DBQE/TOSl+FOexA3koIgRAj2qAKCpAyDWCRDvjfxJw8f0XFl1g+NMqwCffIzS sY/r7a3VBAhOPAWjoGQ1TRk= =+Qx6 -----END PGP SIGNATURE-----
participants (2)
-
James Oakley
-
zentara