Advanced

6 Simple & Safe Postfix Changes for Over 95% Spam Reduction

Posted by Sander_Marechal on · 11 comments
Simple Thoughts; By Angsuman Chakraborty
Mail this story
Print this story

I used to receive around 5,000-7,000 spams daily on my email which is publicly available on the internet. It was consuming too many productive hours daily to fight spam. I decided to fight back. To reduce the spams I first made changes to my postfix configuration with the aim to stop most spams upfront. With 6 simple changes to my postfix configuration my spams dropped from 5,000 - 7,000 to a manageable 5-20 spams daily, often less. Let’s look at these 6 simple postfix changes in details to drastically reduce your spam count too. I am consistently getting over 99% spam reduction after implementing these changes. The changes proved to be safe and without false positives. In several weeks of manual browsing through the log file, I couldn’t spot a single false positive (a case where legitimate mail is rejected).

Full Story

  Nav
» Read more about: Story Type: Tutorial; Groups: Linux

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (11)

It's a pretty good article with good explanations of Postfix's built-in filtering options. However, while the author claims no false positives in six weeks of use, most admins won't be so lucky, because these checks will also reject mail from mis-configured servers, which unfortunately are legion. Using RBLs is also perilous, even the ones listed in the article, which are pretty reliable. If you expect to get a lot of mail from strangers, using these options will cost you some legitimate messages. OTOH if you're a grumpy hermit who can easily whitelist who you want to hear from (and the article should have mentioned whitelisting), then it's good tactics.

It's not really fighting back- it's just building a bigger umbrella and taller waders for weathering the shitstorm. Fighting back would be a slick, automated way to trace the buggers back to their sources and fry them on the spot.
Quoting:Fighting back would be a slick, automated way to trace the buggers back to their sources and fry them on the spot.


Now that is an idea that has real appeal.
If you can invert it, you'll be a millionaire. As will the guy who invents a device that allows you to slap people over the internet :-)
BlueFrog from "Blue Security " in Israel did just that - it fought back a little too well; so the spammer mafia threatened to assassinate their families.
Quoting:the spammer mafia threatened to assassinate their families.


They must have been very effective, good.
Quoting:They must have been very effective, good.


Not really... AFAIR BlueFrog collapsed under spammers' fighting back the fighting back. It's no longer operating.
After BlueFrog collapsed, a number of new projects were started that hoped to fill the gap. The most promising was using the same technique but over a p2p network to remove any single-point-of-failure. However, most of these projects seem to have died. Too bad, because BlueFrog was pretty effective indeed.
I have a special hatred for spammers. Not sure why... there's something dirty about it I just can't explain. When I receive an email where every single potentially filterable word is intentionally misspelled, I have to ask myself if anyone actually trusts these people enough to buy any product from them.

And they are everywhere. I used to work for an online dating site, and spammers would constantly join as members. My wife and I recently started playing World of Warcraft... and you run into characters in there all the time with names like "Gsdjkfhsjkdfhsdfasf" who try and spam you with their "We sell Warcraft gold" spam.

Quoting:I have to ask myself if anyone actually trusts these people enough to buy any product from them.


Apparently yes. The best proof of this is that the spammers are still sending spam. They would stop if it wasn't worth it.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post