Search found 17 matches

by aaronwatson
2016-08-22 15:49
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I found one mistake on my whitelist. I'll keep an eye on anything that comes through from this point forward to see how much that takes care of. I made the rookie mistake of wildcard whitelisting *rb*. You'd be surprised how many domains/addresses use that combination. Including the one in my posted...
by aaronwatson
2016-08-20 16:31
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: RE: Re: SPAM Filter not firing on some messages

One thing I found to eliminate a lot of SPAM is a 20 second pause in OnClientConnect... Spammers really hate to wait :mrgreen: Function Wait(sec) With CreateObject("WScript.Shell") .Run "sleep -m " & Int(sec * 1000), 0, True End With End Function Sub OnClientConnect(oClient) If (Left(oClient.IPAddr...
by aaronwatson
2016-08-19 14:24
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

Interesting -- just checked my windows server logs and the timeouts aren't registering in the event logs. There are some there, just not as many as are actually failing and none on the date of my sample.
by aaronwatson
2016-08-19 13:35
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I'll try disabling DNS caching on the server and see if it helps. I know it might slow things down a few ms, but it will keep things fresh in case it's a cache problem.
by aaronwatson
2016-08-19 01:18
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I use our domain controllers (two available). The primary is on a virtual machine stored on the same host. Those servers run local dns and send external queries to Google. I haven't noticed failing queries for other services (eg www browsing).

The same server also runs some http proxy services.
by aaronwatson
2016-08-18 21:04
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

It's the "sleep" command... Thanks. I did a direct copy/paste of your code and it's throwing errors I can't seem to fix. (though as I understand it's basically VBScripted Tarpitting so I'll see if I can tweak it) The log does not show ANY RBL's being queried.. Indeed, that was the original concern ...
by aaronwatson
2016-08-18 17:55
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I tried running the script. Logs are reporting an error when executing the code in which case I'm not sure if it's running correctly. "ERROR" 2512 "2016-08-18 11:50:36.316" "Script Error: Source: (null) - Error: 80070002 - Description: (null) - Line: 3 Column: 9 - Code: (null)" It would appear the s...
by aaronwatson
2016-08-18 17:44
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

One thing I found to eliminate a lot of SPAM is a 20 second pause in OnClientConnect... Spammers really hate to wait :mrgreen: Function Wait(sec) With CreateObject("WScript.Shell") .Run "sleep -m " & Int(sec * 1000), 0, True End With End Function Sub OnClientConnect(oClient) If (Left(oClient.IPAddr...
by aaronwatson
2016-08-18 17:35
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I got one today. Here's a sanitized clip of the logs: "TCPIP" 2512 "2016-08-18 10:28:49.831" "TCP - 36.84.3.229 connected to hmailserverinternalip:25." "DEBUG" 2512 "2016-08-18 10:28:49.831" "TCP connection started for session 13262" "SMTPD" 2512 13262 "2016-08-18 10:28:49.831" "36.84.3.229" "SENT: ...
by aaronwatson
2016-08-18 15:11
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

We do use greylisting albeit a very short resend window and I've been allowing SPF and A/MX passthrough which might be making it redundant. That said, I was watching the logs just now and saw 127.0.0.3 response code for zen.spamhaus.org. I guess I'll have to keep tweaking the settings and see what c...
by aaronwatson
2016-08-16 02:54
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

What score do you give that test?
15

What is your mark score?
5

What is your delete score?
14

Intentionally aggressive which is why I was surprised so much gets through.
by aaronwatson
2016-08-16 01:31
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

Its looking for 3-11
by aaronwatson
2016-08-15 17:10
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I'm currently using the zen list and have it well within delete threshold. It's recommended that if using Zen that you don't use the others (related to Spamhaus). Shouldn't that catch it?

https://www.spamhaus.org/zen/
by aaronwatson
2016-08-15 14:15
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

I checked some of the sender domains and it's doesn't appear to be a whitelist problem. Here's the header from a sample message that made it through in case it's relevant: Received: from hmailserver.ourdomain.com (192.168.#.#) by ourinternalmailserver.local (192.168.#.#) with Microsoft SMTP Server (...
by aaronwatson
2016-08-05 17:41
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

jimimaseye wrote:And ANTI-SPAM - General - Maximum Message Size . Check that too.
I have it set for 10240KBs so it should scan most messages under 10MBs (our ISP limit).
by aaronwatson
2016-08-05 16:52
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

Re: SPAM Filter not firing on some messages

Is spam checking enabled in relevant IP range Yes. As a public filter, I have antivirus and anti-spam turned on. We only use it for inbound so internet is the only range (not including autoban entries which I set up as an added precaution) Do you have any whitelist entries?? About 25 or so. I don't...
by aaronwatson
2016-08-04 14:47
Forum: General discussions
Topic: SPAM Filter not firing on some messages
Replies: 38
Views: 10855

SPAM Filter not firing on some messages

I'm having trouble with the spam filter. Here's an example from AWStats log. Some messages seem to be intermittently bypassing the filter altogether. (v5.6.4) "SMTPD" 2484 94703 "2016-07-28 14:45:23.740" "195.24.220.16" "SENT: 220 mailbox.ourdomain.com ESMTP" "SMTPD" 2484 94703 "2016-07-28 14:45:24....