Koozali.org: home of the SME Server

Anything like that available for SME Server?

Offline calisun

  • *
  • 601
  • +0/-0
Anything like that available for SME Server?
« on: July 01, 2010, 01:54:24 AM »
I have a friend that I helped install his own SME server.
He keeps complaining about all the spam he gets. Most of it gets sent to his Junk Mail box, but he still complains.
I have found something that might help him and everybody from receiving spam ever again.
My question is, is there something like that available for SME Server?

http://www.sendio.com/authentication-about


Thanks
SME user and community member since 2005.
Want to install Wordpress in iBay of SME Server?
See my step-by-step How-To wiki here:
http://wiki.contribs.org/Wordpress_Multisite

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Anything like that available for SME Server?
« Reply #1 on: July 01, 2010, 03:27:31 AM »
I have found something that might help him and everybody from receiving spam ever again.

Not so.

Quote
My question is, is there something like that available for SME Server?

http://www.sendio.com/authentication-about


A contrib was developed using qconfirm. I think (and hope) that nobody is still using it, because it generates lots of spam itself. Every time a spam item arrives, the "please confirm that you really sent this" message is sent off to the purported sender. Either that sender didn't actually send it, and receives a "please confirm" spam message from you (and from everybody else who is running a confirmation system like you), or your mail queue becomes full of undeliverable "please confirm" messages.

Imagine if everybody ran a system like that, and lots of spammers were using your email address with their spam messages. Can you imagine how much 'please confirm you really sent this" messages would appear in your mailbox?

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: Anything like that available for SME Server?
« Reply #2 on: July 01, 2010, 03:35:20 AM »
calisun

Have you/your friend enabled RBL's and SBL's ?
See
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Real-time_Blackhole_List_.28RBL.29
and
http://wiki.contribs.org/Updating_to_SME_7.2#RHSBL_Servers
and
http://wiki.contribs.org/Updating_to_SME_7.2#DNSBL_Servers

Note that these are NOT enabled by default on SME server.
You can also add extra lists for more rejection, but be careful when adding aggressive lists as you may block legitimate emails.

Note that email in the junkmail folder has been accepted by your server and then filtered by spamassassin.
You may want to tweak your spamassassin rules.
See the email FAQ and these forums for extra spammassassin solutions/add ins/tweaks eg
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Spamassassin
and
http://wiki.contribs.org/SME_Server:Documentation:FAQ#The_Sonora_Communications_.22Spam_Filter_Configuration_for_SME_7.22_howto

You might also tweak your anti virus system as that may help reject messages that are also spam.
eg
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Anti_Virus


Furthermore have you enabled Executable content filtering in server manager. This will also help to reject certain types of messages containing executable code, some of which can be viruses and contain spam.
 
Also see this thread (and many earlier ones) re greylisting which I don't personally recommend using, but some people find it great. I have used it and it really kills spam, but it kills real messages too, and needs a fair bit of handholding by the admin. OK for controlled email sitiuations where you receive email from specific groups of people only.
http://forums.contribs.org/index.php/topic,46229.0.html

In that thread I was moreso referring to
http://wiki.contribs.org/Qpsmtpd_check_earlytalker

For manual control/blocking/allowing of senders via white lists and black lists, install and use the Email WBL panel in server manager
yum install --enablerepo=smecontribs smeserver-wbl
signal-event email-update

Start at the beginning of my post and work through the suggestions as RBL's and SBL's will reject a HUGE amount of spam etc. Enable more lists and you reject even more spam. You may not need to use the other techniques mentioned.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: Anything like that available for SME Server?
« Reply #3 on: July 01, 2010, 03:39:25 AM »
calisun

I see Charlies concurrent post re qconfirm.
Tried/tested that years ago and it is a bad idea to use systems that behave that way.
Stopped using it before it even got to final release stage. Too many "not good" issues.
The other list of suggestions I gave you should do a lot of damage to spam if you set them all up carefully.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Anything like that available for SME Server?
« Reply #4 on: July 01, 2010, 05:38:10 AM »
In that thread I was moreso referring to
http://wiki.contribs.org/Qpsmtpd_check_earlytalker

That post is obsolete. check_earlytalker is installed and enabled by default.

Offline calisun

  • *
  • 601
  • +0/-0
Re: Anything like that available for SME Server?
« Reply #5 on: July 04, 2010, 07:37:29 AM »
Thank you for your help
SME user and community member since 2005.
Want to install Wordpress in iBay of SME Server?
See my step-by-step How-To wiki here:
http://wiki.contribs.org/Wordpress_Multisite

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: Anything like that available for SME Server?
« Reply #6 on: July 04, 2010, 07:51:54 AM »
calisun

What did you do ?
Has it improved things ?
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.