[rt-users] Adding Delete Button

Gene LeDuc gleduc at mail.sdsu.edu
Mon Apr 30 14:22:44 EDT 2007


Ben, I've read that spambot authors prefer higher mx servers because their 
filtering mechanisms are probably not maintained as well as the primary mx 
boxes (those with the lowest mx numbers).  The traffic hitting our highest 
mx server is > 95% spam; traffic on our primary mx server is < 20% 
spam.  As always, YMMV.

At 11:07 AM 4/30/2007, Benjamin Robson wrote:

>Bill,
>
>Have you tried the old bogus-mx record trick?
>
>That is, alter the MX records for the mail server handling inbound mail 
>such that the first few MX entries (with the lower, but getting higher, 
>record numbers) are bogus (point to nothing) and the valid MX entry isn't 
>till later in the list and has the highest record number.  In the 
>good-ol-days spambots wouldn't go past the first (or first few) MX entries 
>if they were invalid, where legitimate mail servers would.  Even these 
>days, bots will only go so far because they don't want to waste time doing 
>too many attempts as they work their way through a target's list of MX 
>entries trying to find one that works.
>
>Anyway, just another idea to consider.  But I do think your in the region 
>of rapidly diminishing returns.
>
>BenR
>
>
>
>
>"William (Bill) Triest" <wtriest at chemistry.ohio-state.edu>
>Sent by: rt-users-bounces at lists.bestpractical.com
>
>01/05/2007 03:47 AM
>To
>Kenneth Marshall <ktm at rice.edu>, rt-users at lists.bestpractical.com
>cc
>Subject
>Re: [rt-users] Adding Delete Button
>
>
>
>
>Kenneth,
>
>Thanks, we've already been working with spamassassin.  Other departments
>have what should be the exact same configuration and complain when 9
>spam a weekend get through.  When we have less then 9 in a night, we're
>happy.  Spam filtering is over 90% effective, but with our spam level
>that's just not sufficient.  Our best guess as to the root problem is
>the server can not handle the load.  Obviously fixing the root problem
>(in-effective spam filtering) would be ideal, and its something we are
>VERY actively working on. In the mean time my boss has charged me with
>adding back the delete button, thus my question.
>
>Thanks,
>Bill
>
>Kenneth Marshall wrote:
> > Bill,
> >
> > We found that putting RT behind DSPAM or another Baysian based filter
> > was the best solution for us. The support staff monitor the quarantine
> > and train the misses. It is accurate enough that only a very few ever
> > make it to the RT system.
> >
> > Ken
> >
> > On Mon, Apr 30, 2007 at 12:16:28PM -0400, William (Bill) Triest wrote:
> >
> >> Basically a lot of spam gets through our spam filtering and ends up in
> >> rt.  We hacked an older version of rt to have a delete button to the
> >> right of the take button under RT at a glance so we could easily delete
> >> spam.  I've been trying to find "the right way" to do add it back to our
> >> current version (3.6.3).
> >>
> >> If you go to Customize "N" newest unowned tickets, you can add new
> >> Columns.  For the link option you have Display or Take.  I think I just
> >> need to add a delete option, and then add a Column (similar to the
> >> loc(Take) that's currently in there).  Is this correct?  If so, for the
> >> life of me I can't find what I need to edit it, and would appreciate
> >> some one pointing me in the right direction.
> >>
> >> --Bill Triest
> >> Systems Specialist
> >> Department of Chemistry
> >> The Ohio State University
> >> _______________________________________________
> >> http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
> >>
> >> Community help: http://wiki.bestpractical.com
> >> Commercial support: sales at bestpractical.com
> >>
> >>
> >> Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
> >> Buy a copy at http://rtbook.bestpractical.com
> >>
> >>
>
>_______________________________________________
>http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
>Community help: http://wiki.bestpractical.com
>Commercial support: sales at bestpractical.com
>
>
>Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
>Buy a copy at http://rtbook.bestpractical.com
>
>_______________________________________________
>http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
>
>Community help: http://wiki.bestpractical.com
>Commercial support: sales at bestpractical.com
>
>
>Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
>Buy a copy at http://rtbook.bestpractical.com


-- 
Gene LeDuc, GSEC
Security Analyst
San Diego State University 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20070430/109187c8/attachment.htm>


More information about the rt-users mailing list