Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Mdaemon server faces spam

Posted on 2006-04-23
9
Medium Priority
?
990 Views
Last Modified: 2008-01-09
I am using Mdaemon server with avg antivirus a spam filter ofmdaemon is also installed and configured
i am stormed by millions of email with different specs every timemeaning different email, subject,ip but almost same gifs that is over all 4 gifs  with in three days.
the common features in the email are the all contain gif attachment and theyall are from different addresses
please recomend a spam controller as well as any tip in the configuration of mdaemon settings
i have corporate edition of norton on the same server

one of the email headers is as under

Received: from mail.magic.net.pk ([203.81.192.6])
      by imt.edu.pk (imt.edu.pk)
      (MDaemon.PRO.v7.1.0.R)
      with DomainPOP id pd50000482503.msg
      for <staff.sst@umt.edu.pk>; Sun, 23 Apr 2006 18:25:16 +0500
Return-Path: <kzbrwv@greywave.ca>
Message-ID: <000c01c666d8$fc9ceebb$ad1d4252@hfyp.iqx>
From: "Noll Winter" <kzbrwv@greywave.ca>
To: <staff.sst@umt.edu.pk>
Subject: small-time
Date: Sun, 23 Apr 2006 15:18:34 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
      type="multipart/alternative";
      boundary="----=_NextPart_000_0008_01C666E9.C025BE7F"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Scanned-By: MIMEDefang 2.44
Status:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11)
X-Spam-Report:
      *  0.0 HTML_MESSAGE BODY: HTML included in message
      *  0.5 HTML_40_50 BODY: Message is 40% to 50% HTML
      *  1.5 HTML_IMAGE_ONLY_04 BODY: HTML: images with 200-400 bytes of words
X-Spam-Status: No, hits=2.0 required=5.0 tests=HTML_40_50,HTML_IMAGE_ONLY_04,
      HTML_MESSAGE autolearn=no version=2.63
X-Spam-Level: **
X-MDAV-Processed: imt.edu.pk, Sun, 23 Apr 2006 18:25:16 +0500
X-MDRemoteIP: 203.81.192.6
X-Return-Path:
Precedence: bulk
X-MDMailing-List: staff.sst@umt.edu.pk
X-MDSend-Notifications-To: [trash]
X-MDaemon-Deliver-To: attiq@umt.edu.pk

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C666E9.C025BE7F
Content-Type: multipart/alternative;
      boundary="----=_NextPart_001_0009_01C666E9.C025BE8E"

------=_NextPart_001_0009_01C666E9.C025BE8E
Content-Type: text/plain;
      charset="windows-1252"
Content-Transfer-Encoding: quoted-printable


------=_NextPart_001_0009_01C666E9.C025BE8E
Content-Type: text/html;
      charset="windows-1252"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1252">
<META content=3D"MSHTML 6.00.2600.0000" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2><IMG alt=3D"" hspace=3D0=20
src=3D"cid:000701c666d8$fc9cee70$ad1d4252@hfyp.iqx" align=3Dbaseline=20
border=3D0></FONT></DIV>
</BODY></HTML>

------=_NextPart_001_0009_01C666E9.C025BE8E--

------=_NextPart_000_0008_01C666E9.C025BE7F
Content-Type: image/gif;
      name="chorus.gif"
Content-Transfer-Encoding: base64
Content-ID: <000701c666d8$fc9cee70$ad1d4252@hfyp.iqx>

0
Comment
Question by:Wild_Cat
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 26

Expert Comment

by:jar3817
ID: 16526485
Sorry I'm not very familiar with mdaemon...but one thing that would dramatically cut down spam would be to reject all connections that don't have reverse dns. Based on the headers you supplied your server accepts mail from ips without PTR records (Received: from mail.magic.net.pk ([203.81.192.6])).
0
 
LVL 3

Expert Comment

by:kiitii
ID: 16588148
Try mailmarshal.
http://www.marshalsoftware.com/

You will need another server acting as mail gateway. To ease the load of your email server.
Mail Marshal is a leading Anti-virus, Anti-spam, Content-filtering server.

0
 

Author Comment

by:Wild_Cat
ID: 16688469
no usefull help
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:Wild_Cat
ID: 16688473
The mail is still comming
for the time bieng i have stoped the mail with gif attachment
can u reffer to some free spam filter that would do .......
0
 
LVL 3

Accepted Solution

by:
kiitii earned 200 total points
ID: 16688518
How about using Linux as Mail Gateway to fight spam?

or

Mozilla Thunderbird has built in anti-spam features, but that is client level anti-spam solution.

Spamfighter for Outlook, is a free anti-spam plugin for outlook. also client level anti-spam solution.
0
 
LVL 26

Assisted Solution

by:jar3817
jar3817 earned 200 total points
ID: 16690231
Have you given spamassassin a look?

http://spamassassin.apache.org/

When set up correctly and trained it can be VERY effective. I suggest (like kiitii said) to use a linux relay for your mail. You can set up sendmail to relay the messages to your inside mail server and have it do virus scan, spam tagging, dnsbl lookups and insanity checks.

Sendmail + MIMEDefang (http://mimedefang.org/) + Clam AV (http://www.clamav.net/) + spamassassin (see link above) is a great combination, I use it at work and at home. The only problem is you have to configure the options you want and do a little programming to get it functioning the way you want it. I reject mail from hosts listed in a bunch of dns blacklists, without reverse dns,  that don't say a proper helo/ehlo (with a fully qualified domain name), forge their helo/ehlo, that come from dynamic ip ranges (dialup,dsl,cable). It works very well for me, but was not simple by any means to get going.

If you're looking for something point and click that just works, I'd suggest you buy something like Surfcontrol's email filter (http://www.surfcontrol.com/Default.aspx?id=357&mnuid=1.2). I use their web filter at work and it is great.
0
 
LVL 1

Assisted Solution

by:ralfalpert
ralfalpert earned 200 total points
ID: 16741564
Spamassassin is part of MDaemon Pro and very effective. Upgrade to MDaemon 8.2 or 9.x and use SpamAssassin. I kills 99% of my spam.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Article by: Dermot
The life of crime is over for 22 year-old Christian Ian Salvador, a student from Isabela State University in the Philippines.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Suggested Courses
Course of the Month20 days, 17 hours left to enroll

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question