Security Incidents mailing list archives

Policyd-weight: WAS: Massive SPAM Increase


From: Paul Schmehl <pauls () utdallas edu>
Date: Mon, 09 Oct 2006 18:08:30 -0500

--On Monday, October 09, 2006 17:47:51 -0500 Nathaniel Hall <nathaniel.d.hall () gmail com> wrote:

Sounds a lot like SpamAssassin.

With one huge difference. Policyd-weight rejects the mail *before* DATA, so the MTA never has to handle the mail. No queueing, no attempted deliveries, etc., etc.

I also use spamassassin, and, as you know if you use it, you have to watch the scoring very closely to not lose legitimate email. Policyd simply eliminates all the drek that comes from forging, domain hijacking and mta hijacking. What's left is easy for sa to handle (as well as the poor postmaster.)

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

Attachment: _bin
Description:


Current thread: