Results 1 to 6 of 6
  1. #1
    Join Date
    Nov 2004
    Location
    Edmonton, Alberta
    Posts
    90

    Spam Configuration

    I have a question on spam. I did a search and read all the relevant posts on the subject, but still don't see the answer I need. I have a client that is being bombarded by spam from outside sources, mostly porn.

    First a little background. I have a RH9 server, with cpanel. I use spam assassin and have it enabled on the client's account. When I click on configure spam assassin, I have 2 blacklists listed, one from cbl.abuseat.org and one from sbl.csma.biz. In email filtering, I have spam assassin enabled, $h_X-Spam-Status: begins "Yes".

    Is there anything else I can do to block spam on client accounts. Or blacklists I can install?

    Is there a way to do this globally on WHM or via Shell so, that I don't have to configure this on individual accounts.

    Thanks,

  2. #2
    Join Date
    May 2005
    Posts
    67

    Re: Spam Configuration

    Originally posted by jethbrown
    I have a question on spam. I did a search and read all the relevant posts on the subject, but still don't see the answer I need. I have a client that is being bombarded by spam from outside sources, mostly porn.

    First a little background. I have a RH9 server, with cpanel. I use spam assassin and have it enabled on the client's account. When I click on configure spam assassin, I have 2 blacklists listed, one from cbl.abuseat.org and one from sbl.csma.biz. In email filtering, I have spam assassin enabled, $h_X-Spam-Status: begins "Yes".

    Is there anything else I can do to block spam on client accounts. Or blacklists I can install?

    Is there a way to do this globally on WHM or via Shell so, that I don't have to configure this on individual accounts.

    Thanks,
    What MTA are you using? Qmail by chance? If so, you can easily block the offending IPs in your /etc/tcp.smtp file which stops the offending sending from being able to connect to your smtp server.

  3. #3
    Join Date
    Mar 2004
    Location
    Singapore
    Posts
    6,984
    If you are blocking by IP, I think it would be easier to use the IP Tables, for qmail you need to run tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp < /etc/tcp.smtp after every change.

    For any MTA, I would recommend putting say spamhaus, spamcop etc RBL which does its part by blocking a substantial amount of spams.

  4. #4
    Join Date
    Nov 2004
    Location
    Edmonton, Alberta
    Posts
    90

    Re: Re: Spam Configuration

    Originally posted by debrown3rd
    What MTA are you using? Qmail by chance? If so, you can easily block the offending IPs in your /etc/tcp.smtp file which stops the offending sending from being able to connect to your smtp server.
    Is there a quick way to check this by shell commands? I am still pretty new at serving. I think it is Exim.

  5. #5
    Join Date
    Jan 2002
    Location
    Scotland
    Posts
    918
    If using exim in WHM

    Go to the exim configuration screen - go to advanced mode

    In the third input screen you should see something that begins
    #!!# ACL that is used after the RCPT command
    check_recipient:
    # Exim 3 had no checking on -bs messages, so for compatibility
    # we accept if the source is local SMTP (i.e. not over TCP/IP).
    # We do this by testing for an empty sending host field.
    accept hosts = :


    Change this to : - replacing the rbl's with the ones you want

    #!!# ACL that is used after the RCPT command
    check_recipient:
    # Exim 3 had no checking on -bs messages, so for compatibility
    # we accept if the source is local SMTP (i.e. not over TCP/IP).
    # We do this by testing for an empty sending host field.
    accept hosts = :

    drop dnslists = bl.spamcop.net : relays.ordb.org : sbl-xbl.spamhaus.org : list.dsbl.org : hil.habeas.com : taiwan.blackholes.us
    message = your mail server $sender_host_address is in a black list \at $dnslist_domain ($dnslist_text)

    In addition try and make sure you customer does not have a catchall setup, try to get them to set up aliases instead and set the catchall to :fail: contrary to popular belief do not set this to :blackhole


    *****************
    Nil illegitimi carborundum
    I'm getting old and don't do drugs. I get the same effect just standing up fast.

  6. #6
    Join Date
    Nov 2004
    Location
    Edmonton, Alberta
    Posts
    90
    Thanks, that setup works just perfectly.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •