Blacklist To: not working

[Dan Harris]

>> Ok I understand how callouts work, but management insist that we accept
>> inbound mail to any address at ourdomain.co.uk so that we can catch simple
>> typos and forward the mail on. Unfortunately the destination for these
>> non-existent addressees is me, which is why I would like to block some of
>> the biggest spam destination addresses somehow. Hence the question about
the
>> To: entry in the blacklist. Is there any good reason why the To: entry in
my
>> spam.blacklist.rules wouldn't work? If so is there a "Better Way (TM)" to
>> block just a few destination addresses in MailScanner/SA/Exim4?
>>
>
>I reject inbound to non-existant email addresses with a 550 no
>such user (again using exim).
>
>that way any 'real' from: user at with a type in the address will get a
>proper bounce message. Spammers etc will just not get through. This
>system blocks about 66% of my inbound email!!!
>
>BUT you can not deliver high scoring spam using the rule sets.
>
>If you want to setup blacklists you'll need something lthe same so the
>rule looks like..
>
>FromOrTo:       baduser at solid-state-logic.com      delete
>
>on the  Spam Actions, etc rules..
>
Thanks Martin,

I totally agree that setting up aliases and rejecting at the MTA is the best
way to deal with this, but while my management disagree it's unfortunately
just not an option.

Fortunately I've discovered why some spam messages were still creeping
through: Some silly person had white listed the whole of btinternet.com! So
it may be worth noting that a To: address in the spam.blacklist.rules does
now work, despite what Julian may or may not have said previously.

Sorry for wasting everyone's time on that, and thanks for all of the advice
given. You never know it may just help me persuade the powers that be that
blocking non-existing users at the MTA is a good idea after all!

Thanks again,

Dan.

PS. Thanks to Julian for creating such a great product. We now get less than
10% of the volume of spam landing in users mailboxes than with our previous
mail filter, RAV!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!