[CLUG] MailScanner problem

[Blacknight]

adam wrote:
> Bog standard MailScanner on a bog standard CentOS 4.4 box Michele. I
> used to run OpenProtect, which is a pre-configured package of the same
> spec (sendmail, not qmail), but it hasn't been updated in years so I
> said I'd give MailScanner a go directly.

Ok. Which MTA are you using?

> 
> It's not performing anywhere near as efficiently, with dozens of spam
> messages getting through daily, most of them with clear keywords like
> the v one that helps you with those of a female persuasion. Obviously
> that's because of my ignorance of MailScanner configuration.

You need to look at expanding your rules. I'd strongly recommend using
some of the SARE ones and using Rules Du Jour to keep it up to date.

Depending on who you are handling mail for you could also consider using
one or two of the DNSBLs to drop mail completely


> 
> There does seem to be one commonality, in that the mail that gets
> through untagged all seems to come from direct SMTP connections to the
> server. But oddly, some of that mail IS tagged and filtered correctly!
> Is there a flag for direct SMTP connections perhaps?

It sounds like you might have both the MTA and MailScanner running side
by side. What could happen is that instead of you symlinking the
mailscanner init script to the MTA init script you still have both
inits, so a percentage of your mail is being handled by the MTA only.. .
though from what you say this might not be happening.


> 
> How do I turn up the gain on logging? I'll have a look at the config
> options now, I just haven't seen any related to logging.

It's all in MailScanner.conf

What you want to look at is your logging settings and which things you
want to log.

-- 
Mr Michele Neylon
Blacknight Solutions
Hosting & Colocation, Brand Protection
http://www.blacknight.ie/
http://blog.blacknight.ie/
Tel. 1850 929 929
Intl. +353 (0) 59  9183072
Direct Dial: +353 (0)59 9183090
Fax. +353 (0) 1 4811 763
-------------------------------
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business
Park,Sleaty Road,Graiguecullen,Carlow,Ireland  Company No.: 370845