[SLL] collaborate on a dnsbl?

[Jarod Wilson]

On Thursday 12 May 2005 11:54, Jules Agee wrote:
> Glenn Stone wrote:
> > On Thu, May 12, 2005 at 11:01:48AM -0700, Rob Blomquist wrote:
> >>On Thursday 12 May 2005 10:18 am, Jeremy C. Reed wrote:
> >>>I continue to get virus and spams sent to my systems that aren't listed
> >>> on the RBLs that I use. I also sometimes check a set of other RBLs and
> >>> not listed.
> >>
> >>Have you tried using spamassassin, razor2, pyzor and using selected rules
> >>
> >>from SARE?
> >
> > SARE?  Was ist das?
>
> Spam Assassin Rules Emporium. Some very nice third-party addon rules for
> SA. But if you're running SA 3 or later most of the best of these have
> been incorporated into the default distribution.

However, they release tweaked/updated rules on a much more regular basis than 
the SA project releases new releases. For some of the SARE rulesets, I have a 
nightly cron job that looks for updated rulesets, pulls them down and lets me 
know about them.

> > I'm debating, myself, on whether to try and hook the body-scan-for-URL
> > stuff into Postfix...
>
> There are standalone Postfix tools for SURBLs? Sweeeeeet :-)
>
> I'm using SA to check the SURBLs. I agree it's a pighawg, but I've got a
> box with plenty of RAM dedicated to the SA so it works fine. You just
> have to put a limit on the number of SA processes that will start up or
> else it can turn a dictionary attack into a DOS...  :-(

I'm rather partial to my combination of some blocks done in postfix itself, 
then handing everything off to maia mailguard (aka amavisd-new with a web 
management/quarantine inspection UI), which in turn calls clamd and 
spamassassin. Certainly not light-weight, but extremely effective.

Also, the maia project folks are talking about setting up a collaborative RBL 
of their own.

-- 
Jarod Wilson
jarod at wilsonet.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.ssc.com/pipermail/linux-list/attachments/20050512/4cdb45e0/attachment.pgp