Page 1 of 4 123 ... LastLast
Results 1 to 10 of 31

Thread: Challenge/Response for 100% spam reduction?

  1. #1
    ThorGoLucky's Avatar
    ThorGoLucky is offline Special Member
    Join Date
    Jun 2006
    Location
    Corvallis, Oregon, USA
    Posts
    100
    Rep Power
    8

    Lightbulb Challenge/Response for 100% spam reduction?

    Is Zimbra considering implementing a challenge/response system so that any email received by Zimbra must be registered with Zimbra? I've seen this feature on hosted email systems. It's restrictive but the spam situation is getting out of hand.

  2. #2
    dkarp is offline Zimbra Employee
    Join Date
    Aug 2005
    Posts
    1,433
    Rep Power
    11

    Default People HATE this

    I've spoken with a few people who had to deal with sending mail to such a system. They absolutely HATE it. Some go so far as to refuse to send mail to such hosts.

    You can, of course, file an enhancement request in bugzilla for this.
    Bugzilla - Wiki - Downloads - Before posting... Search!

  3. #3
    scottnelson is offline Special Member
    Join Date
    Jun 2006
    Location
    Washington DC
    Posts
    124
    Rep Power
    8

    Default

    Agreed! Business use of a c/r system is "just poor" form really.

    I have pretty much got rid of 99% of my spam:

    1. 66/20 vs. stock 75/33
    2. http://www.rulesemporium.com/rules.htm
    Stock, OEM and adult rules
    I even upped the points for .gif's in the "stock scams" rule from 1.66 to 4.66
    3. RBL's ( Can't stress using these enough!!!! )

    4. DSPAM is now at 1 vs. stock 0.5

    I know, one of those YMMV things but, you can get pretty darn close really.

    My .02 worth anyway.

  4. #4
    anand is offline Zimbra Employee
    Join Date
    Sep 2005
    Posts
    274
    Rep Power
    9

    Default

    scottnelson, how hard was it to add SARE rules to a Zimbra install? Can you please document it or file a bug if we are making it difficult to add SARE rules to a Zimbra install or if we are blowing away your SARE additions on an upgrade. Thanks.
    Bugzilla - Wiki - Downloads - Before posting... Search!

  5. #5
    mjfleck2000 is offline Senior Member
    Join Date
    Oct 2005
    Location
    Coeur d'Alene, ID
    Posts
    59
    Rep Power
    9

    Default

    Quote Originally Posted by scottnelson View Post
    Agreed! Business use of a c/r system is "just poor" form really.

    I have pretty much got rid of 99% of my spam:

    1. 66/20 vs. stock 75/33
    2. http://www.rulesemporium.com/rules.htm
    Stock, OEM and adult rules
    I even upped the points for .gif's in the "stock scams" rule from 1.66 to 4.66
    3. RBL's ( Can't stress using these enough!!!! )

    4. DSPAM is now at 1 vs. stock 0.5

    I know, one of those YMMV things but, you can get pretty darn close really.

    My .02 worth anyway.
    Please, how did you up the points for the gif scams? ... that is, what file did you modify?


    I have started using greylisting at our mail gateway with RBL's. This helps alot but dang those gif's. If I could up the score on gif's, I would be a hero here at our clinic.

    Mike

  6. #6
    scottnelson is offline Special Member
    Join Date
    Jun 2006
    Location
    Washington DC
    Posts
    124
    Rep Power
    8

    Default

    Quote Originally Posted by anand View Post
    scottnelson, how hard was it to add SARE rules to a Zimbra install? Can you please document it or file a bug if we are making it difficult to add SARE rules to a Zimbra install or if we are blowing away your SARE additions on an upgrade. Thanks.
    To add a rule or rules:
    Pick a rule from this page: http://www.rulesemporium.com/rules.htm

    Lets say you want to last rule on page called: Stock scams
    http://www.rulesemporium.com/rules/70_sare_stocks.cf

    ssh in as you,
    then 'su'
    then 'su zimbra'
    cd to '/opt/zimbra/conf/spamassassin'
    then 'wget www.rulesemporium.com/rules/70_sare_stocks.cf'

    then, 'zmcontrol stop'
    then 'zmcontrol start'

    Done

    Last Zimbra version upgrade I did, ( 3.12 to 3.14 ) I think the new rules were left in place but don't remember now.
    There is an automatic SARE rules update script called "RulesDuJour" but I have made "point" changes in certain rules so, don't want anything updated automatically overiding my changes. I just check the site once a week or so to see what's changed, if any.

    Rules I use from this site are:

    70_sare_adult.cf
    70_sare_oem.cf
    70_sare_stocks.cf
    72_sare_bml_post25x.cf

    Is this what you needed?

    Scotty

  7. #7
    scottnelson is offline Special Member
    Join Date
    Jun 2006
    Location
    Washington DC
    Posts
    124
    Rep Power
    8

    Default

    Quote Originally Posted by mjfleck2000 View Post
    Please, how did you up the points for the gif scams? ... that is, what file did you modify?


    I have started using greylisting at our mail gateway with RBL's. This helps alot but dang those gif's. If I could up the score on gif's, I would be a hero here at our clinic.

    Mike
    Hey, anything to make you a hero eh? ;-)

    ssh in as you,
    then 'su'
    then 'su zimbra'
    then,
    vi /opt/zimbra/conf/spamassassin/70_sare_stocks.cf

    ( If you don't have this rule, see the post right above this )

    Then
    '/SARE_GIF_ATTACH'

    Default is: 0.75

    I changed mine to 4.75
    Also, I changed 'SARE_GIF_STOX' from 1.66 to 4.66

    Since I am at 66/20, put's it over the top but still delivered to 'Junk'
    folder so people can move to different folder if turns out to be legit.
    Just have to look at the header info for the ones that are getting through
    and up the point value a bit until you get a good balance.

    One of those YMMV things....... ;-)

    Scotty

  8. #8
    jdell is offline Project Contributor
    Join Date
    Jul 2006
    Location
    Reno, NV, USA
    Posts
    203
    Rep Power
    8

    Question

    How did you change the default DSPAM points from 0.5 to 1? I'm not seeing where that is set.

    Also, can you use 'zmamavisdctl restart' or 'zmantispamctl restart' to reload the spam rules rather than the full zmcontrol stop/start routine?

    Thanks for the tips!

  9. #9
    anand is offline Zimbra Employee
    Join Date
    Sep 2005
    Posts
    274
    Rep Power
    9

    Default

    Quote Originally Posted by scottnelson View Post

    Is this what you needed?

    Scotty
    yes, thanks much!
    Bugzilla - Wiki - Downloads - Before posting... Search!

  10. #10
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    There's also an automatic update for these rules by using Rules_Du_Jour, there's a wiki here: Rules_Du_Jour
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Page 1 of 4 123 ... LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 09:59 AM
  2. Spam question (all related)
    By dlochart in forum Administrators
    Replies: 3
    Last Post: 07-24-2007, 08:58 AM
  3. Spam Training: How to properly train DSPAM?
    By Tenshi in forum Installation
    Replies: 14
    Last Post: 05-23-2007, 04:08 AM
  4. Spam being scored with BAYES_00
    By flyerguybham in forum Administrators
    Replies: 6
    Last Post: 04-24-2007, 12:07 PM
  5. Training spam and ham
    By Justin in forum Developers
    Replies: 2
    Last Post: 10-31-2006, 03:39 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •