From owner-freebsd-questions@FreeBSD.ORG Mon Jan 14 14:06:22 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 40CF216A418 for ; Mon, 14 Jan 2008 14:06:22 +0000 (UTC) (envelope-from jalmberg@identry.com) Received: from mta4.srv.hcvlny.cv.net (mta4.srv.hcvlny.cv.net [167.206.4.199]) by mx1.freebsd.org (Postfix) with ESMTP id 2080013C45A for ; Mon, 14 Jan 2008 14:06:21 +0000 (UTC) (envelope-from jalmberg@identry.com) Received: from [192.168.1.110] (ool-4b7f8e42.static.optonline.net [75.127.142.66]) by mta4.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTP id <0JUN00CUW0ILUPS0@mta4.srv.hcvlny.cv.net> for freebsd-questions@freebsd.org; Mon, 14 Jan 2008 09:06:21 -0500 (EST) Date: Mon, 14 Jan 2008 09:06:20 -0500 From: John Almberg To: freebsd-questions@freebsd.org Message-id: <87A9631B-EAC5-41B8-B4C2-001C3ADBA486@identry.com> MIME-version: 1.0 X-Mailer: Apple Mail (2.752.3) Content-type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Content-transfer-encoding: 7BIT Subject: No spam??? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2008 14:06:22 -0000 Last week I set up a brand new mail server with a combination of pf/ spamassassin/maildrop for spam filtering... Everything seems to work great. All real mail seems to be getting through. I monitored the spamd and maildrop logs during the first few days to make sure my very conservative spam settings (spamd marks email that scored higher than 5 as spam, and maildrop drops spam that scores higher than 12) to make sure that real mail isn't getting dropped. At the beginning of the week, I was getting a few spam a day in my spam folder. What has me spooked is that this whole weekend I got exactly one spam in my spam folder (a false positive, in fact). This is down from around 500 that I normally get per day (which is why I was keen to get an up-to-date mailserver!) I know this is an odd thing to worry about, but is this normal? Since the spam doesn't even seem to be reaching spamd, I'm guessing that the real hero is pf, which must be blocking 99.99% of spam at the packet level. Is this normal? TIA: John