?

Log in

No account? Create an account
entries friends calendar profile my webpage Previous Previous Next Next
In the last few days... - Tina Marie's Ramblings
Red hair and black leather, my favorite colour scheme...
skywhisperer
skywhisperer
In the last few days...
I got LeafNode (a small news server) up and running. It's made reading news FAST. And it'll insulate me from the (very common) problems with the newsserver I pay for, since it only connects every 2 hours instead of needing to be connected anytime I'm reading.

And I got SpamAssassin installed and running on a per-user basis. I'm still debating whether I want to tie it into Sendmail or not - for now, it gets run from procmail, so any user can modify the configuration for themselves. If I put it in system-wide, it'll only use one configuration for the whole machine.

I feel accomplished.

In other random news, my hands are finally back to normal. I think the solution was to lower the stress level in my life, but I've also been going to the chiropractor twice a week for the last month.

Work is finally slowing down, and we'll probably ship next week. After that, I'm planning to take a week off and go on a long flying trip - probably to AZ.

The weather is gorgeous, and I'm going to have to go flying this weekend. I'm supposed to spend Saturday helping Mike build his deck, but I might go flying in the morning first. Sunday, if I get my rigs back, we'll go jumping. If not, I'll probably fly some more. I love this weather. I just wish we got more then a month of it a year.

Current Mood: chipper chipper
Current Music: Tom Petty

2 comments or Leave a comment
Comments
alioth1 From: alioth1 Date: October 3rd, 2003 02:52 pm (UTC) (Link)

SpamAssassin

I've got SA installed site-wide (just upgraded to 2.60 since too much spam was leaking through). I find this *highly* effective:

* Install a system filter to reject all Microsoft executables (there's a good one for Exim floating around that I use).

* Install SpamAssassin sitewide.
I gave my users some sample procmail files. My SA installation merely tags the spam as it arrives - the users can do what they want with it. Most just shitcan it by telling procmail to send anything with X-Spam-Flag: YES to /dev/null. A procmail rule could be written to look at the score that SpamAssassin assigned instead. I've got my own procmail rule sending it to a spamtrap file so I can do 'quality control' checks and make sure that SA isn't generating false positives. I've not had a problem at all with false positives yet, but I'll keep the spam trap so I can do statistical analysis.

* Install the Distributed Checksum Clearinghouse client (http://www.rhyolite.com/dcc). The DCC flags virtually all spam correctly. SpamAssassin calls the DCC client, and uses it as part of the spam scoring. It adds 2.9 to the score in SA 2.60 if a message is found in the DCC.

* Use the Spamhaus Blackhole List. Spamhaus is actually a good RBL that attempts to avoid false positives and collateral damage, unlike SPEWS (good riddance - although it's sad that it was killed by a DDoS, SPEWS was vigilante justice at its worst and I'm glad it's gone).

These measures are good enough that you can actually use a real email address in USENET.

Exim has rejected 1.2 GIGABYTES of Swen spooge since the outbreak occurred. I'm glad I didn't have to download it.

Oh, BTW: If the server you've got is with Rackshack, their news servers are GREAT, and it's all part of the service. It is very rare that I have a problem with them (they use Supernews). Just point $NNTPSERVER at newsa.ev1.net on your dedicated server.

skywhisperer From: skywhisperer Date: October 3rd, 2003 05:05 pm (UTC) (Link)

Re: SpamAssassin

* Install a system filter to reject all Microsoft executables (there's a good one for Exim floating around that I use).

I'm still looking for a good one for sendmail.

* Install SpamAssassin sitewide.

Probably pretty soon. As soon as I get over my fear of milters. :)

* Install the Distributed Checksum Clearinghouse client

This I've done already. It's slow unless you run the daemon, and I haven't gotten dccifd working right quite yet, and the install directions are, um, not very good. But it is running dccproc, and, yes, it really helps.

* Use the Spamhaus Blackhole List.

Done. :)

Oh, BTW: If the server you've got is with Rackshack, their news servers are GREAT, and it's all part of the service. It is very rare that I have a problem with them (they use Supernews). Just point $NNTPSERVER at newsa.ev1.net on your dedicated server.

Not anymore:

[tina@tripacerdriver ~]$ telnet newsa.ev1.net 119
Trying 216.168.3.44...
Connected to newsa.ev1.net.
Escape character is '^]'.
502 no permission for 66.98.136.4
Connection closed by foreign host.

A call to support said that they don't provide news service with rackshack accounts. You probably got grandfathered or something. :(




2 comments or Leave a comment