[anti-abuse-wg] Anti spam gateway

Part of the work is the software - the rest of it is watching, tweaking, deploying and changing your filters. These aren't like light bulbs that you can turn them on and all your spam disappears magically

For that sort of static source Brazilian / other snowshoe spammer Spamhaus sbl / dbl and SURBL should generally be adequate 

--srs

> On 10-Oct-2015, at 7:28 PM, Suman Kumar Saha <suman at bdcert.org> wrote:
> 
> Now spam sender is more intelligent  and they use IP with PTR and most of the cases their IP not been listed in RBLs like the header.We don’t want to let them do business with spam by taking cloud based solution like zero spam/comodo anti spam.Rather we are trying to find a open source solution that works well against spam.
> 
> Return-Path: <return at ecommerce.eng.br>
> X-Original-To: technical at dhakacom.com
> Delivered-To: technical at dhakacom.com
> Received: from mail.bdneg.com (ns3.dhakacom.com [118.179.223.10])
>     by mail.dhakacom.com (Postfix) with ESMTP id 24B188003F6
>     for <technical at dhakacom.com>; Sat, 10 Oct 2015 07:23:42 +0600 (BDT)
> Received: from spcr-11.ecommerce.eng.br (spcr-11.ecommerce.eng.br [	])
>     by mail.bdneg.com (Postfix) with ESMTP id EE713F802BC
>     for <technical at dhakacom.com>; Sat, 10 Oct 2015 07:29:15 +0600 (BDT)
> DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=ecommerce.eng.br;
>     h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=abuse at ecommerce.eng.br;
>     bh=o93ep8+n7HSq2EnXXlh49f9uThs=;
>     b=Pu7rSAzPy6dlxqPWxYAd5l14JXkykPVOuBPX2FWM3OmDiHyt92N4PYG5k9sJ3tGqrJgdV25kUjBu
>     Hf1TQRCDnPTFDkp+/gymCd7sF/B/SLQyvo0GkLO62WIWqYY2ufqw2dq9dNGiIfACoMt3K0C5Pn7B
>     EM2/02aTMn9feNfu0kc=
> To: technical at dhakacom.com
> Subject: =?UTF-8?B?UHJvbW/Dp8OjbyBkZSBQbmV1cyBOb3Zvcw==?=
> Message-ID: <c00dc236b2712482879b6c1117cdc090 at ecommerce.eng.br>
> Date: Fri, 09 Oct 2015 19:48:51 -0300
> From: "tatuape" <nao-responda at ecommerce.eng.br/>
> Reply-To: nao-responda at ecommerce.eng.br/
> MIME-Version: 1.0
> X-Mailer-LID: 3,5
> List-Unsubscribe: <http://ecommerce.eng.br/unsubscribe.php?M=420221&C=218ae60a7946264a4d590f99bba14b00&L=3&N=102>
> X-Mailer-RecptId: 420221
> X-Mailer-SID: 102
> X-Mailer-Sent-By: 6
> Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_d3ab14ba7a57d5b09e9e3daefd4680ba"
> Content-Transfer-Encoding: 8bit
> X-dhakacom-MailScanner-ID: EE713F802BC.AAF1E
> X-dhakacom-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
> X-dhakacom-MailScanner-SpamScore: sss
> X-dhakacom-MailScanner-From: return at ecommerce.eng.br
> X-Spam-Status: No
> 
> 
> Thanks
> Suman
> 
>> On Oct 10, 2015, at 7:11 PM, Suresh Ramasubramanian <ops.lists at gmail.com> wrote:
>> 
>> ip block lists  are a first and still quite useful  line of defense. Spam assassin is a series of score based content filters that supplement Spamhaus and such.  SURBL is a URL block list.
>> 
>> Beyond a point however filtering has grown enormously complex (and add issues such as dmarc and other authentication) so your constituents might be better off outsourcing their mail hosting to one of several large players in this field (none that are local to Asia / saarc though)
>> 
>> --srs
>> 
>>> On 10-Oct-2015, at 6:34 PM, Suman Kumar Saha <suman at bdcert.org> wrote:
>>> 
>>> 
>>> RBL  and even PTR record check doesn’t work well.Now spammer also use clean IP and with PTR.Mailscanner/amavis with clamav can’t protect spammers very well.
>>> 
>>> Thanks
>>> Suman
>>> 
>>>> On Oct 10, 2015, at 6:59 PM, Suresh Ramasubramanian <ops.lists at gmail.com> wrote:
>>>> 
>>>> Spamassassin together with free and/or cheap depending on usage pattern block lists such as  Spamhaus and SURBL
>>>> 
>>>> Mailscanner plus amavis does a sort of OK job on antivirus but that's a different ball game
>>>> 
>>>> --srs
>>>> 
>>>>> On 10-Oct-2015, at 6:14 PM, Suman Kumar Saha <suman at bdcert.org> wrote:
>>>>> 
>>>>> Dear ALL,
>>>>> In our community mostly using mailscanner or amavis with postfix/exim as anti spam email gateway.But its perfection is not satisfactory now-a-days.Can you share which open source anti spam application works well.
>>>>> 
>>>>> Thanks
>>>>> Suman
>>>>> bdCERT
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20151010/49ba0e97/attachment.html>