I've been doing some more digging since my last post, and have
figured out that the spam is not being blocked by pf, as I suspected
(since it wasn't showing up in my spam folder), but by spamassassin
blacklists.
The smtp log file has lots of entries like:
2008-01-14 09:30:37.074087500 rblsmtpd: 123.20.89.67 pid 72121: 451
http://www.spamhaus.org/query/bl?ip=123.20.89.67
2008-01-14 09:31:05.271514500 rblsmtpd: 58.227.241.97 pid 72122: 451
Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?
58.227.241.97
2008-01-14 09:31:17.404943500 rblsmtpd: 41.196.155.56 pid 72123: 451
http://www.spamhaus.org/query/bl?ip=41.196.155.56
2008-01-14 09:31:18.304682500 rblsmtpd: 123.20.89.67 pid 72124: 451
http://www.spamhaus.org/query/bl?ip=123.20.89.67
So raises the same point that Oliver makes: how trustworthy are these
blacklists?
-- John
On Jan 14, 2008, at 9:37 PM, Olivier Nicole wrote:
>> I know this is an odd thing to worry about, but is this normal? Since
>> the spam doesn't even seem to be reaching spamd, I'm guessing that
>> the real hero is pf, which must be blocking 99.99% of spam at the
>> packet level.
>
> I don't know how you configured pf, but since I use the black list
> fromhttp://www.sa-blacklist.stearns.org/sa-blacklist/sa-
> blacklist.current.sendmail-access,
> I reduced drastically the spam that reaches SpamAssassin.
>
> The key point with such black list is that you must trust the list, as
> there is no place for false positive.
>
> Bests,
>
> Olivier
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-
> unsubscribe@freebsd.org"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Websites for On-line Collectible Dealers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Identry, LLC
John Almberg
(631) 546-5079
jalmberg@identry.com
www.identry.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~