Moving out

With regrets, I have to moving out. My new blog will be in http://www.indomino.net/blog/ . It's been fun blogging with blogger, but I have to move out to my new blog because of some reasons that I can't say.

Please come and visit my new blog.

And don't forget to visit my primary site at http://www.indomino.net

With Best Regards

Three Reasons why to upgrade your operating system

No matter what kind of operating system that you have, soon you will have the choices to uprage you operating system or not. Windows Vista already released, if you are Windows XP user, than you may have to ask your self, will you need to upgrade you windows? Or if you are Open Suse linux user, will you need to upgrade to the latest version of Open Suse? Even if Open Suse is free?

What is the reason why user need to upgrade their operating system?

For me, there is three reason why we should upgrade our operating system.

Stability and security

All of new operating system will claim that their new operating system will have more stable and more secure than previous version. If you think that you current operatin system is buggy, than maybe you need to upgrade. But, if you current operating system is running stable enough, and you can run all your applications without a problem, I don't see why you need to upgrade your operating system.

Ussually I have to wait at least 6 month before I decide to upgrade anything, not just operating system. I want to see what kind of bugs that other users found and what kind of fixs that the software manufacture released. I don't want to replace my buggy software with more buggier software.

Software compatiblity

If you want to run application that can only run in the new operating system, than you have no choice to upgrade. But, maybe you have to check what are the other options. Maybe first you need to check, if there is another application that similar with the one that you need that can run in your current operating system.

You don't have to use Internet Explorer 7 to surf the net. If you still running Windows 98, than can use Firefox instead. Or maybe you can still run the old version that run nicely with your current operating system. But, if there are no other options, than you have to upgrade.

But vice versa, I still have stocks of Windows NT 4.0 in my list of servers, they are still running old applications that not supported by new version of windows.

Hardware compatiblity

Like it or not, most of old operating system will not recognize new hardware.

I have a software than run on Windows 4.0, and the software requires serial dongle to run. Then a new version of that software come with a new dongle, usb dongle. There is no way to run usb dongle in Windows NT 4.0 because Windows NT 4.0 doesn't support usb port, so we must to upgrade it to at least Windows 2000 server.

Summary

If your current operating system running stable enough and secure enough, your softwares are running just fine, and all your hardware detected without a problem, than there is no reason why you need to upgraded. Unless of course you are the geek that need more chalenges, and want to be the first to run the newest operating system. Other than that, stick with your old operating system until the time will come that you need to upgrade your operating system.

Report from Introducing Suse Linux Enterprise in Jakarta

I was visiting Introducing Suse Linux Enterprise 10 Seminar on Wednesday, 7th March 2007 in Jakarta and hoping that I can see and learn new features from Suse Linux. The Agenda in the invitation card is really promising, but the time frame is to tight, start from 9:00 AM to 01:00 PM with a lot of topics to discuss. It's weird, but because I'm a big fan of Linux (I use Open Suse at home), so I decided to go.

The seminar delayed almost an hour, just because (I think) the projector didn't work. The seminar start an hour later after the projector was replaced with another one.

Now, the speaker (from Malaysia), maybe because of the delay, start to jump in live demo about High Availability Data Center with Xen and Heartbeat. The speaker doesn't even start with a presentation about it. He talk about if one server having a problem, and the other one will take over and also try to restart to server which in problem (if possible). Most of us never heard of Xen and Heartbeat, so jumping to the live demo is really confusing.

Then he start talk about new topic, Thin Client. This is good topic, and he explain a little beat slower, so most of us can understand, at least I can. Thin clients works similar like Windows Terminal Server, where we can use stocks of old pc to do simple task. The thin client doesn't even need a hard disk to boot, it boot directly from the network, and can be use for simple task like data entry.

The final topic is about SLED (Suse Linux Enterprise Desktop), but in this session he mostly talk about the new 3D desktop (xgl) that I think is direct competitor with Windows Vista 3D. After I see the demonstration, I think that the xgl is far more better than Windows Vista. While not that hardware hungry like Windows Vista, it can produce good and smooth 3D graphics desktop. I'm not sure how improvement in graphical user interface like 3D desktop can help you to enhance productivity, but it's a nice touch.

He also talk about the new Open Office 2.0 that can run VBScript macro. He also give us a demonstration that Calc (similiar with Ms Excel) can run Ms Excel file with macro, and it running fine. If this true, than we really can migrate from Ms Windows to Linux. I have to try this with my own stocks of macro.

One of the best thing about MS Office is their Ms Excel, and the best thing about Ms Excel is their macro.

Personally, I have a lot of macro to help my job, mostly for reporting to my boss. Every month giving the same report, macro is a big help. Without macro, I will spend hours just to prepare a report. With macro, I can finish it less than 15 minutes. If Open Office 2.0 really can understand and run windows macro, at least 80% of it, its really a big help. It will give people more strong point to migrate from Ms Windows to Linux.

The good thing about Suse Linux compare with Red Hat that Suse Linux only have two versions of Linux, Desktop (client) and Server. That's it.
While Redhat have many versions of Linux, there are clients, server, advance server... I lost count. But every linux is good, the different is the support. If you buying linux, make sure that you have a good support.

I believe linux is the future.

How Lotus Domino 8 should handle spam, just a suggestion.

Lotus Domino 8 is in the horizon, soon it will come. I do hope that IBM give more attention about how Lotus Domino 8 handle spam.

This is what my suggestion about how Lotus Domino 8 should handle spam and this is my personal opinion only.

Right now Lotus Domino have two tasks to receives and delivers emails to the users, SMTP task and Router task. I think that IBM can add another task for spam filter, just between the SMTP task and the router task.

Current flow:
SMTP task --> Router task

Suggestion flow:
SMTP task --> Spam Filter task --> Router task

This is the flow.

SMTP Task

This task function just like sendmail, but in domino it only for receive emails that sent through SMTP protocols. For sending emails to SMTP protocols domino use the router task. Since domino 7, domino already have significant tools to handle spam like DNSBL, whitelist and blacklist. Even there is no milter, greylist, or GreetPause, but I think SMTP task is enough.
In SMTP task we can reject or tagged emails that listed in DNSBL. If we choose to tagged emails, then when emails delivered to spam filter task, spam filter will give it a score and the score should be high enough.

Spam Filter task (New)
This is where the spam filter really works. It should have many modules to filter spam. Anti virus software can create their modules and then add the module in this task. We also can create our own custom module and then add it to this task.

Spamassassin (like) module
This new task should be using the scoring system like Spamassassin. Spamassassin is doing well in scoring emails. Spamassassin having many rules and each rules will add a score to the total score, then the total score will be use to detemined if the email is spam or ham (not spam). We can set the minimum score for low spam, and the minimum score for high spam. At the end, this task will added new headers to the mail header for final processing in server rules and mail rules.

This sample how Spamassassin scoring works.

The total score is 7.86.
If we set the minimum score for spam is 4, than this email will be tagged as spam.

I do know that there is a project in openntf to integrate Spamassassin in domino

http://www.openntf.org/Projects/pmt.nsf/ProjectLookup/SpamAssassin%20Integration
, so I know this is possible.

Bayes module
Well IBM already promising bayes in domino 8, so I don't think this is a problem. Another suggestion that domino should provide mail in database for spam and ham, so users can sent emails to designation database. Then the bayes will learn form that databases.

DCC, Razor and Pyzor modules
These three tools perform very well in Spamassassin, so I think domino
should also use this tools.

Another DNSBL?
Just to add more score?

Router task
Server rules will than process the header from spam filter task, and do
some action for the emails marked as spam (or ham). I think the best rules
is for high scoring spam should be deleted, and for low scoring spam should
be delivered to the junk folder.

Well, I think I try to recreate MailScanner for domino. But MailScanner is
a very good software, so there is no reason why IBM not using the same
technique like MailScanner in Lotus Domino 8.

Windows Vista, A Killer OS

Yup, I mean in. Windows Vista, A killer OS (Operating system). It really
will kills (you).

You can see windows Vista requirements at
http://www.microsoft.com/windows/products/windowsvista/editions/systemrequirements.mspx

You see know, why I says Windows Vista: A Killer OS. It will kill your
budget and wallet. If you have any plan to use one, you can say good bye to
your old computer. Simple upgrading the memory simply not enough, this
beast will require new processor and new graphic card too.

The rules is simple. If you wan to use it, buy a brand new computer with
the latest hardware and huge amount of memory. Event the home basic
edition require minimum of 512MB of memory, that just for the OS! If you
need to run applications like MS Outlook 2007, that you need at least 1GB
of memory. That minimum configuration. The 'Wow' starts now - that's True!.

These are just a few words about vista that I got from mailing list that I
join. These people mostly computer consultant with years of expertise. I
think I listens for what they says.

• I'm running Outlook 2007 on a dual Xeon 3.06Ghz (not HT either) with 4G of RAM and it still drags.
  

• I just tried Vista with the latest MS Office. It ran quite well. Of course, you have to have a system with the nuts to handle it. This was on a Dell with an Intel dual-core (3.8 Ghz I believe) system. Tons of memory. I would never use it on an outdated single core system with 512memory.
  

• I find Outlook 2007 to be MUCH slower than 2003. I'm am not impressedby Vista or Office 2007 so far.
  

• Yeah, and what will be the requirement in the next version on windows, a supercomputer, and that's just for basics :P
  

• Quad processor, 4 GB ram, 2GB will be used upon successful bootup. In order to have the cool graphics as MacOS XII, you will need an SLI-2x4 4 - GPU video card that costs twice as much as the motherboard and processor chip.
  

• I used Vista for a week on a laptop that was purchased within the last six months and branded as "Vista Ready!" It ran like crap, the driver support for the touchpad was abysmal, and it lived in virtual memory. I'll run XP until I can't anymore. After that, FreeBSD on the desktop is looking more and more attractive.
  

• I don't object to Microsoft taking advantage of the power of newer machines, but I do find it rather annoying in the case of Vista that the *requirements* for the OS are so high. I've seen nothing in Vista that justifies using so much machine for just the OS. I do need to run a Vista box so that I can be familiar with the thing when my clients call with questions about it.
  

• Currently I'm running Vista Ultimate on a Core 2 Extreme X6800 with 2G of very nice RAM and an X1950XTX graphics card. I have a very fast array of 3G SATA drives, and Vista does look pretty and it's quite snappy. But... The same box feels faster with XP SP2.

Sure they are also some good words about Microsoft Vista, but hey... I'm
not gonna quote them. :)

I'm not yet running Windows Vista, but for the prices of the OS and the
price for the new hardware, I think I never will.

I'm not prepare to buy a new computer, and I think many people are like me,
have a tight budget. I think I will stick with my old notebook powered by
Pentium III 733 Mhz with 512 MB, running dual boot nicely with Windows XP
Home edition and with Open Suse 10.1.

I still belive linux is the future (and now Lotus Notes runs under linux
too)

Another parody about Windows Vista

Another parody about Windows Vista. This one from linux fan. The 'original' is from apple fan. I think the original 'joke' about Windows Vista is in http://uselessinfoandpics.blogspot.com/2007/02/apple-making-fun-of-microsoft.html

Review on How Lotus Domino 7 blocking SPAM

Lotus Domino 7 is already release almost a year ago, but I still using
Lotus Domino 6.54FP1 as my Domino server, and client mostly Notes client
6.53. I don't see any thing necessary for me to upgrade it immediately.
Maybe for me is better to wait until version 7 get older enough and stable
enough. But that my personal opinion.

But still, I'm very interested with version 7, because soon or later I WILL
upgraded my current servers and clients to version 7. Before I do, I need
to start to do some reading about version 7.

I download IBM Red Book called Security Consideration in Lotus Notes and
Domino 7: Making Great Security to Implement, very interesting guide. For
me, security and stability is number one.

Because mostly I interested with SPAM, I quickly jumped to Chapter 8, where
it discuss about Spam control using Domino 7 and go directly to section 8.5
Blocking Spam. Skip the others.

New Features:

DNS Whitelist (DNSWL)
It works similar with DNS Black List, but instead of rejecting the email,
DNSWL make sure that the emails will be accepted. I believe DNSWL take
precedence again DNSBL. So if emails it listed in DNSWL, Domino should not
make any necessary query on DNSBL server.
I'm not sure if this feature is already becoming the standard in MTA. I
think there are not so many MTA that already have this feature installed.
I know that there is hack for sendmail to enable this feature, but not
built in.

Private Whitelist Filters
With Private Whitelist Filters you can specify witch host (or IP address)
that should listed as friendly. So emails from these hosts should be
accepted. You can also use an asterisk in this filters, so *.yahoo.com
should works. Private Whitelist filter take precedence over Private
Blacklist Filters

Private Blacklist Filters
This the opposite of Private Whitelist Filters. Emails from these hosts
should be rejected or at least tagged for further processing.

For supporting these new features, Domino also have new conditions and
action in Server Rules and Mail Rules. But this conditions and actions
should be available as soon as domino start using DNSBL.

New conditions:
Blacklist tag
Whitelist tag

New Action:
Stop Processing further rules.

This new conditions and action make us easy to handle spam, before this we
have to create agents to check is the message is tagged or not.

Simple new mail rules should be:
When Blacklist tag contains sbl.spamhaus.org then move to folder
($JunkMail)

Summary:
With these new features in Domino 7, and promises that IBM will start using
the bayesian spam filter (where many other MTA already using this long long
time ago) I think Domino going to go to the right direction for war against
spam.
But this current features still not enough, at least for me.
Big problem is there is no scoring method the way that spamassassin use.
Where the higher the score, the higher the possibilities for the email for
being spam. With scoring method we can define spam as low spam emails and
high spam emails. Where for low spam emails I usually still relay the
emails but to the junk folder so later the user still able to review the
email in case of false positive, and for high spam emails will be deleted
in the server.

I think I still keep my third party anti spam (MailScanner).

Sample Code: Shell function

In the forum, some one asked how he can download a file from a web server
via lotus script. It hit me. I have exactly almost the same function, but I
download from a ftp server instead of a web server. But, it almost the
same.

Actually lotus script - as far as I know - doesn't provide function for
that. So, I look elsewhere, then I found a very interesting function call
shell.

From Designer Help, description about shell function is very short - Starts
another program - that it, no more no less.

Later I found out that shell can 'almost' run anything via command line,
like my agent that called an ftp program to download or upload a file.

Sample of my agent:
Dim TaskID as integer
TaskID = Shell ("c:\programto\download.bat")

Than I create a batch file called download.bat
ftp.exe -i -s:"c:\programto\download.txt">c:\jbadownload\log\getsO13Log.txt

Than I create a download.txt
open ftp.server.com
ftpusername
ftpusepassword
ascii
prompt
cd tosomefolder
lcd tosomelocalfolder
get somefile
bye

See the tricks?

I don't use any third party ftp client, just using ftp client that already
included in all windows distribution. That's works.

I also use the shell function to do many things, like extract zip files
with pkunzip and many more.

How to configure sendmail as a gateway

This is a simple how to about how to configure sendmail to act as a mail
gateway.

This how to will only talk about 3 files: access, mailertable and
relay-domains.

File relay-domains NOT included in sendmail distribution (at least in my
CentOS distribution), you have to create it manually.
All files (at least in my CentOS) located in directory /etc/mail

Access file
First, we put our host and our network to be able to relay through our
server.
localhost.localdomain RELAY
localhost RELAY
127.0.0.1 RELAY
192.168.1 RELAY
192.168.2 RELAY

If you use GreetPause feature, you can put no waiting for local email.
GreetPause:localhost 0
GreetPause:192.168.1 0
GreetPause:192.168.2 0

If you using DNSBL, and want to skip one or two domains from DNSBL check,
you can use this
Connect:friendlydomain.com OK

Now for the big part.
Put all the domain that you want to relay BUT put it as REJECT. This way by
default all emails to that domain will be rejected unless we specify
otherwise - in this case OK.

indomino.net REJECT
blablabla.org REJECT
something.edu REJECT

user1@indomino.net OK
user2@indomino.net OK
user3@indomino.net OK

user1@blablabla.org OK
user2@blablabla.org OK

user1@something.com OK

Finish. For access file, you can use make -C /etc/mail to 'compile' it.

Mailertable file
Now put this entry in mailertable, so sendmail will know to where it will
route the emails.
indomino.net smtp:smtp.indomino.net
blablabla.org smtp:[192.168.1.25]
something.edu esmtp:[192.168.1.50]

Finish. Do make -C /etc/mail to 'compile' it.

Relay-domains file.
Most forgotten file, I think because it's not included in most
distribution. You have to create it manually. Simply as type touch
/etc/mail/relay-domains to create the file.

Now type all the domain that you want to relay.
indomino.net
blablabla.org
something.edu

Finish. Now restart the server.

How to create your first notes database

Once, I met a friend who just take a course on domino designer. After a
small talk, he ask a question that surprised me. How to create a lotus
notes database? I look at him, and ask didn't he just take a course for
that? It seem a stupid question. then he explain me that he know how to
create form, views etc, BUT he doesn't how to start and how they linked to
each other. Based on my friend experienced, I create this mini how to. This
is a very basic tutorial on how to create your first lotus notes database.

To do this, you must installed domino designer.

First of all, create a blank database.
>From File menu, select Database and click New. Than right click the
database, then click Open in Designer.

Second, create a form.
In the form, you should at least add one field, and action buttons to edit
and save.
For edit button, you can use this simple formula:
@Command([EditDocument])

For save button, you can use this formula
@Command([FileSave]);

If needed, you can add another action button, called Exit or Close
@Command([FileCloseWindow])

Third, create a view to display the form.
In the view, you should add an action button to create the form that you
just created.
Example:
@Command([Compose];"Form A")

That it. Very basic, but your first notes database is ready to go.

To make your database more readable by users or to make it more good
looking, you can add these additional steps.

First, I like how IBM design the mail template. Therefore I like to use the
same design as in the mail template.

Create few pages
As in mail template, create two pages, one for database name, and second to
display your user name.
For page to display your database name, just type the name, no formula
needed.
For page to display your user name, create a computed text, and in the
formula windows type this formula @Name([CN];@UserName).

Create an outline.
Outline will simplify how your notes user will switch on different view.
Create one outline, and click generate default outline and then create a
page to display the outline.

Create a frame.
And to put the whole elements that you just created, you use a frame.

Now from the database properties, in launch tab, select the frame that you
just created as default launcher.

That it. Your database now look more professional with pages and frame. Add
more colors or pictures if you have too.

To add more functionality for your database, create an agent. This, another
story.

Steps to stop SPAM

There is a good article about steps that we can use to prevent spam, you
can find the very good article in here
http://www.spamhaus.org/effective_filtering.html.

Personally, I use spamhaus as my primary DNSBL. It never let me down. Off
course there are some legitimate emails that being block by spamhaus, very
few, and that's not my problem. :).
I believe email administrators and ISP admin must protect they servers and
their network from spammers.

These is my configuration to stop spam:

1. DNSBL test in mta level.
I use sendmail as my mta server, and activated DNSBL in sendmail. Why put
DNSBL in mta level? Because it can stop a lot of spam before it transferred
to our mail server. But because it will stop few legitimate emails, I try
to put 'not so aggressive' DNSBL like sbl from spamhaus (actually I use
sbl-xbl.spamhaus.org).

2. Greetpause
Great new feature from sendmail. This way all emails (except if we put some
conditional) will be forced to wait for HELO or EHLO command from the mta
server. If the email doesn't bother to wait for HELO or EHLO command, the
we don't bother to receive, we simply kick it.

3. Mailscanner
Great software. Nothing more to say. You can download the latest version in http://www.mailscanner.info. In Mailscanner I activate these
features:

3.1. Spamassassin
A must. In new version of spamassassin there a script called sa-update to update builtin spamassassin rules, you can use cron job to make it run automatically every day.
You can add additional rules for spamassassin, most of them are in http://www.rulesemporium.org, additional rules can be automatically updated with smart cron job called rules_du_jour.

3.1.1. DCC + Razor
Inside the Spamassassin, I turn on both DCC and Razor. Increase the spam
score enough to make it a spam.

3.1.2. Bayes
Help a lot to stop more spam. I create two mail box, one for spam and one
for ham (non spam). Each day, a cron job will learn from each mail box, and
learn it as spam or ham.

3.2. Clamav (for check viruses)
Every mail server need antivirus. Clamav is the best there is, and free.

3.3. Another DNSBL test (to increase score)
This DNSBL actually will increase the spam score.

That's are my configurations. Hope that will help you to create your own
configuration for battle against spam.

Sample Code: Import data from a text file into notes database

This morning, I have a question for a member of mailing list, how we can
import data from a text file. Well I just have the code for that. Is quite
simple on how to import the data from a text file, but what you gonna do
with the data, is another question.

This a cut version of my lotusscript agent. I only show how we import the
data from a text file. My agent, actually use the data to create new
documents in notes database. The text file should located in the server
where the agent run. Also the signer of the agent must have appropriate
rights in the server.

In the agent, you will see the NoteLog object. Well, I have a habit to
create a log on every agent that I created. So I can troubleshoot the agent
easily if something goes wrong.

>>>>>
Sub Initialize
Dim fileNum As Integer
Dim strLine As String

'//=====prepare for loging
Dim currentLog As New NotesLog( "Import data from text file" )
Call currentLog.OpenNotesLog( "", "AMgrLog.nsf" )
'//=====

fileNum = Freefile()
Open "c:\data\import\sample.txt" For Input As fileNum

'//=====
Call currentLog.LogAction( "Import data from text file - Start")
'//=====

Do While Not Eof (fileNum)
Line Input #fileNum, strLine
'//===now you have strLine variable that you can manipulate as
you want
'//===example Trim(Mid$(strLine,69,7))
Loop

Close fileNum
'//=====loging
Call currentLog.LogAction( "Import data from text file - End")
Call currentLog.Close

End Sub
>>>>>

Now, you have it and have fun.

Lotus notes client 7.01 for Linux

Maybe some of you remember when WE - Lotus Notes user and also Linux lovers
- ask when will the IBM release Lotus Notes client for Linux? The answer is
simple, NEVER because it will need to redesign and recoding the software
completely, and even IBM doesn't have resources for that.

But now, there is.

IBM finally launching Lotus Notes client for Linux since June 2006. Thanks
to eclipse powerful software, IBM engineers able to run Lotus Notes client
as eclipse plug-in.

Some user report that the client is take a lot of memory because it run
under the eclipse software. While eclipse software it self take a lot of
memory. Users hope that maybe in future, respectful IBM engineers will able
to make eclipse software much thinner and lighter and of course faster. So
Lotus Notes client able to run under it with better performance.

Right now, only passport customers are able to download the software. There
is no trial version - yet.

Well, at least we have hope now. Not that simple answer NEVER.

Linux is the future, as simple is that. And IBM knew it, that why despite
the NEVER answer, IBM still looking for a way to make Lotus Notes run under
linux. Thanks IBM for great and wonderful software's.

Funambol: Open Source Domino Sync

While I'm browsing the openntf.org I saw an add that interest me. Open Source Domino Sync. The first two words very interesting, 'Open Source' :).
When I click that link, it link to me to this site at http://www.funambol.com/opensource/, and inside its much much more interesting.

It's very like similiar with software like commontime, where we can sync our contact, calendar even email and journal to our 'mobil device' but it's an open source. It's compatible with many mail server and with many 'mobile device'. It even provide domino connector, so Funambol server can connect to the domino server.

I have an old palm device and been searching for sync software for a while, and found out that commontime is more suitable for my purpose. But, with my budget, I can only afford the desktop version where I can only sync when I connect to my pc at work. I can not sync from anywhere else.

But with this, push email for domino is in the horizon with no cost at all.

I not yet try this piece of software, but after I create a testing environmet, I will try it asap.

How to block spam in Lotus Domino 6.x?

This is a simple how to, and I hope will take you a quick guide to block spam with Lotus Domino 6.x
First, Lotus Domino is a great software. It's not just email, it simple more than that. If you want to use just email, you can have many options availbale, from pop3, imap, exchange, webmail etc. But if you need email AND also sharing, groupware and colaboration capabilities, Lotus Domino is the BEST choice.

But, when it many features, Lotus Domino is lack of it anti spam capabilities. It's improving, but still not enough.

If you have resources and time, you should put another server in the front of Lotus Domino to handle spam, but if you not, you can maximize Lotus Domino features. Like I said, its not enough, but its better then nothing.

All smtp configurations available in Domino Directory at Configuration --> Servers --> Configuration

DNS Blacklist Filters
This is a must. This is the first guard againts spam, in others mta, it known as rbl or dnsbl.
Most popular rbl servers are spamhaus and spamcop.
How it works? In smtp connection, smtp task will do a query for every incoming email if that email originating ip listed in the rbl server. If listed, then the smtp task simple reject the server, if not than continue the smtp connection. It saves bandwith and server resources and it block spam.
One must be carefull to choose the rbl server, because some servers are very aggresive, it may block your legitimate emails.
My persoanl choice is spamhaus, and the server is sbl-xbl.spamhaus.org. But that my personal choice.

Options available in DNS Blacklist Filters and also an example:
DNS Blacklist filter: Enabled
DNS Blacklist sites: sbl-xbl.spamhaus.org
Desired Actions when a connecting host is found in a DNS Blacklist: Log and Reject messages.
Custom SMTP error response for rejected messages: 'leave it blank'

Inbound Connection Controls
If you want to tight up the spam control than you can enable this. It will check your the host (computer name) than send the emails is listed in DNS query, and it must have reverse lookup entry in DNS.
Example: If new email come from domain testdomain.com with hostname testhost, the smtp will check if the testhost.testdomain.com will resolve an ip address. If not the it will reject the connection. If it resolve an ip address like 202.xxx.xxx.xxx then it will accept the connection.

Options availbale in Verify connecting hostname is DNS:
Allow connections only from the following SMTP internet hostnames/IP addresses:
Deny connections only from the following SMTP internet hostnames/IP addresses:

Inbound Sender Controls
This is a must. The smtp will check if the domain sender can be found in a DNS query. If not, it simply reject the connection.

Options available in Verify sender's domain in DNS:
Allow messages only from the follwoing external internet addresses/domains:
Deny messages only from the follwoing external internet addresses/domains:

About MailScanner

One word about MailScanner, great.
It a tools that, well almost eliminate all your emails problem. Virus, and spam email will be eliminated. Not 100% though, but hey, nothing can.
MailScanner it a perl script that rely on other tools and software to eliminate virus and spam. It heavily rely on Spamassassin to check if the email is spam or not. For viruses, it can detect and use multiple anti virus installed, for example you can use clamav and f-prot for the same time.

MailScanner have many rules to simplify it setting. It have whitelist, blacklist, file name rules, file type rules and many others. For rbl, we can put it in mta level or in MailScanner. For example, we can put a safe rbl (which almost ONLY block spam) in mta level, and we put more agressive rbl in mailscanner. Very flexible.

You can configure MailScanner in most known mta server, like sendmail, postfix and exim. It very easy to install, my first try take me about 2 hours. And the server is up and running.
With the default configuration, it more than enough. to handle spam, but you tweak it if you like. The configuration is self explain, very easy to understand.

Conclusion.
MailScanner it a very usefull software. If you are a mail administrator, its a must. The features is more powerfull than most paid software.

I will write more about mailscanner, very interesting software.
You can learn more about mailscanner at http://www.mailscanner.info

A great place to blog.

Ok, just create an account in blogger.com. I think this will be great place to post tips and tricks about lotus notes/domino. Later I will create a link from my website whic is http://www.indomino.net to this blog, and vise versa.