Subj : Re: Snoop InfoSystems seems to be up and running To : Rene Laederach From : Benny Pedersen Date : Sun May 04 2003 22:06:16 * Reply to message originally in area CarbonArea Hello Rene! 04 May 03 15:41, Rene Laederach wrote to Benny Pedersen: RL> I happen to have that huge O'Reilly tome called 'sendmail' on my RL> bookshelf, and I have properly installed SpamAssassin and DNS RL> blacklists and block China and Korea there is a nice milter in sendmail, with can be used for mimedafang, and if you happy to learn perl, you can do anything with sendmail/mimedefang :) ----- local.cf begins ----- # Dieter Weber, www.hughes-family.org/bugzilla/show_bug.cgi?id=1647 meta TOO_MANY_UA ((USER_AGENT_MOZILLA_UA + USER_AGENT_PINE + USER_AGENT_KMAIL + USER_AGENT_VM + USER_AGENT_MACOE + USER_AGENT_GNUS_XM) > 1) describe TOO_MANY_UA Doesn't make sense to have more than one UA score TOO_MANY_UA 18.0 meta TOO_MANY_UA2 ((USER_AGENT_MOZILLA_UA + USER_AGENT_PINE + USER_AGENT_KMAIL + USER_AGENT_VM + USER_AGENT_MACOE + USER_AGENT_GNUS_XM) > 2) describe TOO_MANY_UA2 Way too many user agents score TOO_MANY_UA2 40.0 meta TOO_MANY_UA3 (TOO_MANY_UA && REFERENCES) describe TOO_MANY_UA3 Lots of user agents with references score TOO_MANY_UA3 12.0 meta TOO_MANY_UA4 (TOO_MANY_UA && IN_REP_TO) describe TOO_MANY_UA4 Lots of user agents with a "reply to" score TOO_MANY_UA4 12.0 ----- local.cf ends ----- SA rooks :) RL> (see http://snoop.alphanet.ch/antispam/ RL> korea-china.html for the reasoning) some stats for how much spam from this areas being dropped to /dev/null ? RL> and now we live pretty spam-free. I could never do this with UMS, okay you could not do it, but ums can hooks up for somehing like this with rfc library :) RL> alas, and ontop of that spamassassin is quite CPU intensive. SpamAssassin is not it self cpu hungry, but the perl api is, it could take alot of memory when running :) Regards Benny .... wow :) --- Msged/LNX 6.1.2 (Linux/2.4.18-27.8.0 (i686)) * Origin: ftp://junc.org/ binkd 0.9.5 xpoint@junc.org (2:237/53) .