Results 1 to 5 of 5

Thread: Automatic Blacklisting using a Spam Trap acc

  1. #1
    BenG is offline Intermediate Member
    Join Date
    Mar 2007
    Posts
    18
    Rep Power
    8

    Default Automatic Blacklisting using a Spam Trap acc

    G'day All,
    I have noticed that we occasionally get hit with a burst of spam(ie the same SPAM to a few accounts), and then which after a few hrs or so starts being tagged by either our client level AntiSPAM or Zimbra.
    Or presumably gets into the RBLs.
    However it is this initial burst of emails that I'd like to target if possible.

    With another Mail server product we could identify a specific account, for example:
    able.promiscuous@domain.com.

    The server would then treat any email sent to this address as if it were radioactive and not only ban the sender, but also the MTA etc as well as score the contents and use it to rate other incoming emails.
    Providing pretty effective 0 day protection.

    We then placed able.promiscuous@domain.com on the website, and in other various locations, such as seeding it in dodgy websites/mailing lists, making it attractive to spammers.

    Now I assume that we could alias the joe.promiscuous@domain.com to the "zimbraSpamIsSpamAccount" value, and this would provide some level of protection, as well as use the SpamAssassin:
    "blacklist_to add@ress.com"
    If the given address appears as a recipient in the message headers (Resent-To, To, Cc, obvious envelope recipient, etc.) the mail will be blacklisted.
    But this will not quite have the same result if the spammer sends single recipient messages, and Spam learning is only done once a day.

    So, does anyone have any ideas on how we might get a similar function in Zimbra?


    Rgds Ben

  2. #2
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,016
    Rep Power
    24

    Default

    Please update your profile with the following so we know which version of ZCS you are running
    Code:
    su - zimbra
    zmcontrol -v

  3. #3
    BenG is offline Intermediate Member
    Join Date
    Mar 2007
    Posts
    18
    Rep Power
    8

    Default

    oops sorry, of course. :-)

    Rgds Ben

  4. #4
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,016
    Rep Power
    24

  5. #5
    BenG is offline Intermediate Member
    Join Date
    Mar 2007
    Posts
    18
    Rep Power
    8

    Default

    Yep, I did.
    However it didn't mention the feature have described above. Unless I missed it?
    The advantage of the other mail servers system, was that it worked very quickly, ie the next mail that came through was tagged, and it also didn't rely on volumes of emails.
    One email was enough to trip the system.

    I can see that using Pyzor etc would be very useful, but I didn't think they worked the way I mentioned above?

    Allso the Wiki states "Verified Against: ZCS 4.5.x" with only a single mention of 6.03 for "Milter" and the rest being quite old. So I was cautious about relying on it.

    Rgds Ben

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Moving Zimbra to a new server
    By krolen in forum Administrators
    Replies: 109
    Last Post: 02-05-2009, 11:38 AM
  2. Major SPAM to one account
    By CarputerTech in forum Administrators
    Replies: 4
    Last Post: 09-04-2008, 10:54 PM
  3. Cannot login as admin after install
    By elesouef in forum Installation
    Replies: 23
    Last Post: 02-13-2007, 09:06 AM
  4. Seeming variety of problems on suse-9.1
    By Crexis in forum Installation
    Replies: 52
    Last Post: 03-04-2006, 12:19 AM
  5. Building a spam trap ?
    By basjes in forum Administrators
    Replies: 4
    Last Post: 02-27-2006, 07:16 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •