<html>
<body>
Ben, I've read that spambot authors prefer higher mx servers because
their filtering mechanisms are probably not maintained as well as the
primary mx boxes (those with the lowest mx numbers). The traffic
hitting our highest mx server is > 95% spam; traffic on our primary mx
server is < 20% spam. As always, YMMV.<br><br>
At 11:07 AM 4/30/2007, Benjamin Robson wrote:<br><br>
<blockquote type=cite class=cite cite=""><font size=2>Bill,</font>
<br><br>
<font size=2>Have you tried the old bogus-mx record trick?</font>
<br><br>
<font size=2>That is, alter the MX records for the mail server handling
inbound mail such that the first few MX entries (with the lower, but
getting higher, record numbers) are bogus (point to nothing) and the
valid MX entry isn't till later in the list and has the highest record
number. In the good-ol-days spambots wouldn't go past the first (or
first few) MX entries if they were invalid, where legitimate mail servers
would. Even these days, bots will only go so far because they don't
want to waste time doing too many attempts as they work their way through
a target's list of MX entries trying to find one that works.</font>
<br><br>
<font size=2>Anyway, just another idea to consider. But I do think
your in the region of rapidly diminishing returns.</font> <br><br>
<font size=2>BenR<br>
</font><br><br>
<br><br>
<font size=1><b>"William (Bill) Triest"
<wtriest@chemistry.ohio-state.edu></b> </font><br>
<font size=1>Sent by: rt-users-bounces@lists.bestpractical.com</font>
<br><br>
<font size=1>01/05/2007 03:47 AM</font> <br>
<div align="right"><font size=1>To<br>
</div>
Kenneth Marshall <ktm@rice.edu>,
rt-users@lists.bestpractical.com</font> <br>
<div align="right"><font size=1>cc<br>
Subject<br>
</div>
Re: [rt-users] Adding Delete Button</font> <br><br>
<br><br>
<br>
<tt><font face="Courier New, Courier" size=2>Kenneth,<br><br>
Thanks, we've already been working with spamassassin. Other
departments <br>
have what should be the exact same configuration and complain when 9
<br>
spam a weekend get through. When we have less then 9 in a night,
we're <br>
happy. Spam filtering is over 90% effective, but with our spam
level <br>
that's just not sufficient. Our best guess as to the root problem
is <br>
the server can not handle the load. Obviously fixing the root
problem <br>
(in-effective spam filtering) would be ideal, and its something we are
<br>
VERY actively working on. In the mean time my boss has charged me with
<br>
adding back the delete button, thus my question.<br><br>
Thanks,<br>
Bill<br><br>
Kenneth Marshall wrote:<br>
> Bill,<br>
><br>
> We found that putting RT behind DSPAM or another Baysian based
filter<br>
> was the best solution for us. The support staff monitor the
quarantine<br>
> and train the misses. It is accurate enough that only a very few
ever<br>
> make it to the RT system.<br>
><br>
> Ken<br>
><br>
> On Mon, Apr 30, 2007 at 12:16:28PM -0400, William (Bill) Triest
wrote:<br>
> <br>
>> Basically a lot of spam gets through our spam filtering and ends
up in <br>
>> rt. We hacked an older version of rt to have a delete
button to the <br>
>> right of the take button under RT at a glance so we could easily
delete <br>
>> spam. I've been trying to find "the right way"
to do add it back to our <br>
>> current version (3.6.3).<br>
>><br>
>> If you go to Customize "N" newest unowned tickets, you
can add new <br>
>> Columns. For the link option you have Display or
Take. I think I just <br>
>> need to add a delete option, and then add a Column (similar to
the <br>
>> loc(Take) that's currently in there). Is this
correct? If so, for the <br>
>> life of me I can't find what I need to edit it, and would
appreciate <br>
>> some one pointing me in the right direction.<br>
>><br>
>> --Bill Triest<br>
>> Systems Specialist<br>
>> Department of Chemistry<br>
>> The Ohio State University<br>
>> _______________________________________________<br>
>>
<a href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users" eudora="autourl">
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a><br>
>><br>
>> Community help:
<a href="http://wiki.bestpractical.com/" eudora="autourl">
http://wiki.bestpractical.com</a><br>
>> Commercial support: sales@bestpractical.com<br>
>><br>
>><br>
>> Discover RT's hidden secrets with RT Essentials from O'Reilly
Media. <br>
>> Buy a copy at
<a href="http://rtbook.bestpractical.com/" eudora="autourl">
http://rtbook.bestpractical.com</a><br>
>><br>
>> <br><br>
_______________________________________________<br>
<a href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users" eudora="autourl">
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a><br>
<br>
Community help:
<a href="http://wiki.bestpractical.com/" eudora="autourl">
http://wiki.bestpractical.com</a><br>
Commercial support: sales@bestpractical.com<br><br>
<br>
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
<br>
Buy a copy at
<a href="http://rtbook.bestpractical.com/" eudora="autourl">
http://rtbook.bestpractical.com</a><br>
</font></tt><br>
_______________________________________________<br>
<a href="http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users" eudora="autourl">
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users</a><br>
<br>
Community help:
<a href="http://wiki.bestpractical.com/" eudora="autourl">
http://wiki.bestpractical.com</a><br>
Commercial support: sales@bestpractical.com<br><br>
<br>
Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
<br>
Buy a copy at
<a href="http://rtbook.bestpractical.com/" eudora="autourl">
http://rtbook.bestpractical.com</a> </blockquote>
<x-sigsep><p></x-sigsep>
<br>
-- <br>
Gene LeDuc, GSEC<br>
Security Analyst<br>
San Diego State University</body>
</html>