I've been doing some more digging since my last post, and have
figured out that the spam is not being blocked by pf, as I suspected
(since it wasn't showing up in my spam folder), but by spamassassin
The smtp log file has lots of entries like:
2008-01-14 09:30:37.074087500 rblsmtpd: 18.104.22.168 pid 72121: 451
2008-01-14 09:31:05.271514500 rblsmtpd: 22.214.171.124 pid 72122: 451
Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?
2008-01-14 09:31:17.404943500 rblsmtpd: 126.96.36.199 pid 72123: 451
2008-01-14 09:31:18.304682500 rblsmtpd: 188.8.131.52 pid 72124: 451
So raises the same point that Oliver makes: how trustworthy are these
On Jan 14, 2008, at 9:37 PM, Olivier Nicole wrote:
>> I know this is an odd thing to worry about, but is this normal? Since
>> the spam doesn't even seem to be reaching spamd, I'm guessing that
>> the real hero is pf, which must be blocking 99.99% of spam at the
>> packet level.
> I don't know how you configured pf, but since I use the black list
> I reduced drastically the spam that reaches SpamAssassin.
> The key point with such black list is that you must trust the list, as
> there is no place for false positive.
> firstname.lastname@example.org mailing list
> To unsubscribe, send any mail to "freebsd-questions-
Websites for On-line Collectible Dealers