spam.backlist.rules vs sendmail access file

[Alex Neuman van der Hans]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Richard Smith wrote:

> Been having issues with a virus using specific addresses as a from  
> address that happens to be a valid address, but no one should be  
> sending anything from it (a basic group mail address in /etc/aliases).
>
> At first I put "From: groupaddress at host yes" in spam.blacklist.rules  
> however this has proved to be unreliable, I have sinced put "From:  
> groupaddress at host REJECT" into my /etc/mail/access and while it's too  
> soon to know the difference I'm expecting this to have better results.
>
> My question is, which is better to use when, I'm suspecting /etc/mail/ 
> access is better to a point, but where is that point, do I really  
> need to bother with spam.blacklist.rules at all?
>
Using /etc/mail/access is cleaner, because MailScanner doesn't even see 
the message coming. Using the rules file means messages are received, 
then processed.

One exception: If you can't blacklist the IP for your backup MX because 
it's being provided by a service provider and not under your direct 
control, you would *have* to use the rules file.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!