Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - A Mojor SPAM Pounding!
  FAQ FAQ  Forum Search   Register Register  Login Login

A Mojor SPAM Pounding!

 Post Reply Post Reply
Author
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Topic: A Mojor SPAM Pounding!
    Posted: 15 May 2003 at 12:40pm

Even though it does not meet the RFC requirements, we'll most likely leave the "reject on empty from" option in future builds.

Roberto
LogSat Software

Back to Top
bpogue99 View Drop Down
Groupie
Groupie


Joined: 26 January 2005
Status: Offline
Points: 59
Post Options Post Options   Thanks (0) Thanks(0)   Quote bpogue99 Quote  Post ReplyReply Direct Link To This Post Posted: 14 May 2003 at 4:45pm
Are you totally removing the "reject on empty from"? option? Rather than remove it, why not provide an option to disable reject notices? I dont want any emails with an empty from getting past.
Back to Top
Sean View Drop Down
Groupie
Groupie
Avatar

Joined: 21 February 2005
Location: United States
Status: Offline
Points: 81
Post Options Post Options   Thanks (0) Thanks(0)   Quote Sean Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2003 at 12:34pm
Also, You were right to say most were replies to undiliverable Repies to the blocked sender. Hopefully now this will decrease when the null email is sent back in the loop.
Back to Top
Sean View Drop Down
Groupie
Groupie
Avatar

Joined: 21 February 2005
Location: United States
Status: Offline
Points: 81
Post Options Post Options   Thanks (0) Thanks(0)   Quote Sean Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2003 at 12:30pm

I had already turn off the reject if FROM is empty option, after reading previous Forum post, as well as noticing our Deliever Reciepts and Read Reciepts were being quarentined.

So now I null the email for the Postmaster reply. But for contact pruposes can the name in this be of any length? Such as "Undeliveable Assitant at Company, Please call if you believe this to be an error <>"? Just incase somepeople have no clue what MAP blacklist do?

 

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2003 at 12:23pm

Sean,

In our experience spammers will retry sending if they are disconnected, so that will increase traffic, but not ten-fold!

We have found a problem if selecting the "reject if empty mail from" option. Since non-deliverable error notifications and email receipts are sent with null "mail froms", they are being rejected. We will be removing that feature in the next build. Please try unchecking that option in the meantime.

Another thing yo can take a look at is the "Error Handler Email" config under Settings - Customizeed Items. Try entering there something like:

"System Administrator" <>

with a null email address to avoid loops in case the error emails are themselves returned.

If you still have problems, you could email us a copy of your spamfilter logs for the day you received 1,000 emails and one for the 10,000 day, so we can find any correlation between the two to find out why the increase.

Roberto Franceschetti
LogSat Software

Back to Top
Sean View Drop Down
Groupie
Groupie
Avatar

Joined: 21 February 2005
Location: United States
Status: Offline
Points: 81
Post Options Post Options   Thanks (0) Thanks(0)   Quote Sean Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2003 at 12:13pm

Ok on the first day we ran SpamFilter ISP it blocked only about 1000 emails overnight. Second night, 5000, now last night 10000+! I honestly don't believe we are recieving this much email, and these are Duplicates, or retries.

Is this a result of the senders mail server trying additional attempts to deliver the email message even though it recieved the "Denied" Error message from SpamFilter?

If so, how can I prevent this, becuase now it seems this will increase bandwidth usage tremendously just to check the headers then MAPS servers, then deny the message and disconnect, for messages that have already been processed.

NOTE: Only filter being use is MAPS filter, for original 5 included in version 1.1.2.117

Running Version 1.1.2.117

 

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.047 seconds.