Search found 70 matches

by Pentangle
Tue Mar 21, 2017 6:44 pm
Forum: Filter efficiency
Topic: Listserv-based spam
Replies: 0
Views: 270

Listserv-based spam

Hi all, I'm having a little trouble with one of my customers being targeted by listserv-based spam - i.e. he gets a shit-ton of it and the vast majority of it has "unsubscribe" in either the message body or headers, or "Feedback-ID" in the headers However, when I use the followin...
by Pentangle
Tue Jan 17, 2017 6:45 pm
Forum: Feedback
Topic: SPF bypass for authenticated sender
Replies: 1
Views: 427

SPF bypass for authenticated sender

Hi all, Having been a Mailcleaner user for the last 7 or so years, we're very happy with it, but one deficiency has cropped up now due to a large ISP suddenly turning on SPF record checking a few weeks ago. Essentially, prior to that date we hadn't turned on SPF as a mechanism due to the large numbe...
by Pentangle
Wed Dec 21, 2016 4:07 pm
Forum: Configuration
Topic: Report per user
Replies: 5
Views: 539

Re: Report per user

Which sort of reports? Which mailserver(s)? If you want reports of quarantine, for example, and you have a Mailcleaner cluster, you won't get separate reports per Mailcleaner. If you want separate reports per user then that comes as default. It may help if you explain what you're trying to achieve?
by Pentangle
Wed Dec 21, 2016 3:59 pm
Forum: Configuration
Topic: Reject wrong SFP (fail result)
Replies: 2
Views: 482

Re: Reject wrong SFP (fail result)

That's a bit overly complicated for a demarkation between an internal mailserver (such as my customer's mailserver sending mail out via my spam filters and receiving mail in via them) and an external one (any other mailserver on the internet). Is it possible to have SPF checks bypassed at Mailcleane...
by Pentangle
Thu Dec 15, 2016 12:53 pm
Forum: Configuration
Topic: Reject wrong SFP (fail result)
Replies: 2
Views: 482

Reject wrong SFP (fail result)

Hi all, If I set this, all my customers with domains on the mailcleaner cluster (and proper SPF records) get errors when sending outbound through mailcleaner. As such, it's applying the SPF check on relayed email as well as received email. This is obviously problematic. How can I easily stop it from...
by Pentangle
Mon Dec 05, 2016 4:45 pm
Forum: Filter efficiency
Topic: URIRBLs needing rehabilitation
Replies: 13
Views: 6208

Re: URIRBLs needing rehabilitation

Hi guys,

Thank you ever so much for the full explanation. I've just checked a bunch of spam I needed to block and they all had one of those 3 codes in them. I'll now keep an eye out for whether I get any more of that spam and whether I can check my URIRBL performance. Cheers!

Mike.
by Pentangle
Thu Nov 24, 2016 1:01 am
Forum: Filter efficiency
Topic: Clamspam definitions via sanesecurity
Replies: 7
Views: 3979

Re: Clamspam definitions via sanesecurity

Sorry I didn't see this until now. Here you go. This is the .conf file # This file contains user configuration settings for clamav-unofficial-sigs.sh ################### # This is property of eXtremeSHOK.com # You are free to use, modify and distribute, however you may not remove this notice. # Copy...
by Pentangle
Wed Nov 09, 2016 6:25 pm
Forum: Filter efficiency
Topic: URIRBLs needing rehabilitation
Replies: 13
Views: 6208

Re: URIRBLs needing rehabilitation

Hi Martijn, I'm sorry, I understood Florian was giving me the REGEX for the sex messages, however I already have a couple of REGEX scripts that work for that. I'm actually only asking about your URIRBL fix - where do I fix it? what file? and what does the line "time getent hosts..." actual...
by Pentangle
Wed Nov 09, 2016 1:26 pm
Forum: Filter efficiency
Topic: URIRBLs needing rehabilitation
Replies: 13
Views: 6208

Re: URIRBLs needing rehabilitation

Hi Martijn, Thanks for that - but could you please give me more information? specifically.... - where do I edit and put that file with all the URIRBLs? - what does the syntax do exactly? - how does it identify the bad-performing RBLs? (i.e. is it something it fixes by itself, or something it flags u...
by Pentangle
Thu Oct 27, 2016 7:37 pm
Forum: Filter efficiency
Topic: URIRBLs needing rehabilitation
Replies: 13
Views: 6208

URIRBLs needing rehabilitation

Hi all, Recently i've noticed a small amount of sex spam coming through the filters. This is <200 chars with a sex subject or body and a URL. I've written a custom rule to get rid of it, but the root cause of it coming through in the first place I think is that my URIRBLs all seem to be dying and ne...
by Pentangle
Thu Oct 20, 2016 12:03 am
Forum: Installation
Topic: Mailcleaner Start Stops Initializing Firewall
Replies: 2
Views: 3673

Re: Mailcleaner Start Stops Initializing Firewall

What might help you is that when we install Mailcleaner on VMware we generally build it on a datastore which has no disk caching. This is because there's definitely some script timings in the initial install which don't behave particularly well in a cached disk environment. HTH.
by Pentangle
Wed Oct 19, 2016 11:59 pm
Forum: Hardware/performances
Topic: Support for 60,000+ domains
Replies: 4
Views: 18355

Re: Support for 60,000+ domains

I know this is a very old post, but I thought i'd just add one thing - if you're going to cluster, definitely definitely definitely do NOT attempt to filter ANY spam with your master. I know you CAN, but the disk IO when you get a backlog just makes life a LOT harder to fix things.
by Pentangle
Wed Oct 19, 2016 11:53 pm
Forum: Filter efficiency
Topic: how to train MailCleaner filter from Outlook (with Exchange Server)
Replies: 2
Views: 742

Re: how to train MailCleaner filter from Outlook (with Exchange Server)

IIRC, we had to set up a mail enabled public folder and get our users to drag & drop into it. This was then exported to a mbx file and used to train the filters. It's a PITA.
by Pentangle
Wed Oct 19, 2016 11:52 pm
Forum: Filter efficiency
Topic: Is custom rules replicated from master to slaves?
Replies: 3
Views: 475

Re: Is custom rules replicated from master to slaves?

No it's not. I wish it was. In fact, one of the few improvements i'd like to see (which I've elucidated elsewhere here) is that the custom rules are given the same REGEX interface as the attachments, and then synchronised across all cluster members.
by Pentangle
Thu Oct 13, 2016 12:52 pm
Forum: Filter efficiency
Topic: Being blocked by Office365
Replies: 3
Views: 523

Re: Being blocked by Office365

Thanks - i've found my IP range is listed as belonging to my datacentre provider, so i've logged a call with them as I either need them to fix it for me or give me access to the IP range so I can fix it myself and sign up for JMRP etc.

Go to advanced search