blacklisting

[D Ivago <ba...@gmail.com>]

Hi,

I'm trying to blacklist some domians who sent me spam, I added following
lines in local.cf like I do to whitelist a domain.

whitelist_from_rcvd *@vsko.be vsko.be
whitelist_from_rcvd *@vlhorb.be vlhorb.be
whitelist_from_rcvd *@ocmdgent.be omcdgent.be
blacklist_from_rcvd *@le20wines.com


but I keep getting spam from those 2 blacklisted domains.

Any suggestions for the syntax?

kind regards,

ivago

Re: blacklisting

[D Ivago <ba...@gmail.com>]

>
> *EVERY* time you edit your config files, run spamassassin --lint. It
> should run quietly and just exit if all is well. If there's a problem
> parsing your config, it will print a message to that effect.


so I added
blacklist_from *@le20wines.com
to my local.cf and ran  'spamassassin  -lint' but I got following warning
and killed the program with CTRL-C after 10' cause nothing else happened. Is
this normal behaviour?

[11325] warn: The -l option has been deprecated and is no longer supported,
ignoring.

so I just did a
'spamassassin]# /etc/init.d/spamassassin restart'
wich also adapts the changes made in local.cf

kind regards,

ivago

PS My spamassassin version is 3.1.7

Re: blacklisting

[Matt Kettler <mk...@verizon.net>]

D Ivago wrote:
> Hi,
>
> I'm trying to blacklist some domians who sent me spam, I added
> following lines in local.cf <http://local.cf> like I do to whitelist a
> domain.
>
> whitelist_from_rcvd *@ vsko.be <http://vsko.be> vsko.be <http://vsko.be>
> whitelist_from_rcvd *@vlhorb.be <http://vlhorb.be> vlhorb.be
> <http://vlhorb.be>
> whitelist_from_rcvd *@ocmdgent.be <http://ocmdgent.be> omcdgent.be
> <http://omcdgent.be>
> blacklist_from_rcvd *@le20wines.com <http://le20wines.com>
>
>
> but I keep getting spam from those 2 blacklisted domains.
1) it's blacklist_from not blacklist_from_rcvd. There's no reason to use
the Received: header check to prevent forgery of blacklists.

2) *EVERY* time you edit your config files, run spamassassin --lint. It
should run quietly and just exit if all is well. If there's a problem
parsing your config, it will print a message to that effect.

Re: [SPAM:***] blacklisting

["Chris St. Pierre" <st...@NebrWesleyan.edu>]

On Thu, 18 Jan 2007, D Ivago wrote:

> Hi,
>
> I'm trying to blacklist some domians who sent me spam, I added following
> lines in local.cf like I do to whitelist a domain.
>
> whitelist_from_rcvd *@vsko.be vsko.be
> whitelist_from_rcvd *@vlhorb.be vlhorb.be
> whitelist_from_rcvd *@ocmdgent.be omcdgent.be
> blacklist_from_rcvd *@le20wines.com
>
>
> but I keep getting spam from those 2 blacklisted domains.
>
> Any suggestions for the syntax?
>
> kind regards,
>
> ivago

Blacklisting is a job better done by your MTA, not your spam filter.
Drop their messages before you have to process them, scan them, etc.,
and you'll save yourself some cycles and some headaches.

Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University
----------------------------
Never send mail to thobrux@nebrwesleyan.edu