12 messages in net.sourceforge.lists.courier-usersRE: [courier-users] SPAMmers using mu...
FromSent OnAttachments
Steve JacobsonAug 26, 2005 10:51 pm 
Gordon MessmerAug 26, 2005 11:50 pm 
Sander Holthaus - Orange XLAug 27, 2005 3:03 am 
Sam VarshavchikAug 27, 2005 4:21 am 
Robert PenzAug 27, 2005 4:27 am 
Michelle KonzackAug 27, 2005 4:46 am 
Sander Holthaus - Orange XLAug 27, 2005 4:56 am 
Sander Holthaus - Orange XLAug 27, 2005 5:01 am 
Robert PenzAug 27, 2005 5:42 am 
Jay LeeAug 27, 2005 7:57 pm 
ScottSep 1, 2005 1:30 pm 
Sam VarshavchikSep 1, 2005 3:58 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:RE: [courier-users] SPAMmers using multiple IPsActions...
From:Jay Lee (jl@pbu.edu)
Date:Aug 27, 2005 7:57:40 pm
List:net.sourceforge.lists.courier-users

Sander Holthaus - Orange XL said:

cour@lists.sourceforge.net wrote:

Steve Jacobson writes:

Well, I finally figured out why tarpitting isn't deterring the SPAMmers hitting my server. Every request appears to come from a different IP. Over 3000 just today. This is why we need Greylisting in

BLACKLISTS="-block=sbl-xbl.spamhaus.org,BLOCK"

This should nail most of those.

I use it too, but the the reduction of spam is comparitivly small :-( It appears that they'll just try to relay the message through a different IP and that succeeds quite often :-(

DNS BLs are useless unless all of your MXs for the domain use them. Many spammers now try the highest MX record *first*. If the MX is just a backup relay at your ISP that doesn't use a BL then it will of course accept the mail and your mail server will of course accept the mail from your trusted backup MX. Either reign in control of all your MXs, applying the same address verificaton and anti-spam filters on all of them, or as Sam recommends, don't use backup MXs at all, mail will still be held for up to 4 days on properly configured servers...

Jay