Re: uncatchable spam

Jim Pazarena wrote:
> On 10/4/2010 10:27 PM, Jon Lewis wrote:
>> On Mon, 4 Oct 2010, Jim Pazarena wrote:
>>
>>> my mail server seems to get hundreds of short little
>>> "saw your profile" .. "u r cute" .. etc etc every day.
>>>
>>> Spamassassin doesn't give this junk much weight.
>>> Are there any tweaks or tricks to catch this junk?
>>
>> Reject mail from hotmail?  :)
>> It seems all of that sort of crap I get is from them.
>>
>> Are you seeing these from particular types of senders?  i.e. through
>> hotmail or other freemail providers?  Direct-to-mx from end-user IPs?
>> Relayed through ISP outgoing relays?
>
> seldom if ever do the IPs resolve to -any- name, so I suspect
> direct-to-mx.
Are you using a DUL to reject (or increase the SA score) direct-to-mx 
from dynamic IP addresses?  If not, I suggest you give that a try.  Well 
over 99% of the email sent in this fashion is spam.  I would also reject 
(or increase the SA score) email from IPs that don't resolve to -any- 
name - again well over 99% of email sent from that type of IP address is 
spam.  Well behaved mail servers (that send mostly ham, little spam) are 
not on DUL listed IPs and have appropriate reverse DNS entries.

IMHO, the few people who are sending non-spam email from DUL listed IPs 
aren't worth accepting email from.  If they don't have enough clue to 
obtain a non-DUL IP (e.g. get a static IP from their ISP) and setup 
appropriate reverse DNS, odds are very high that they aren't sending 
anything worth receiving.  However, you may have customers who feel 
differently, and you may need to whitelist a few clueless senders in 
this category.

jc
-- 
Eat sushi frequently. - Avi
[email protected] is the human contact address.
[email protected] is the list posting address.
See below URL for subscribe/unsubscribe and list options:
http://inet-access.net/mailman/listinfo/list