BlackList - Something simple
ajos1 at onion.demon.co.uk
ajos1 at onion.demon.co.uk
Sun Apr 16 23:30:38 IST 2006
-
Yes that makes sense now... I was confused by the fact it said: "This can also be the filename of a ruleset."
I am a silly billy...
I have found out how to do it at MTA level now... and will see if it works... initial tests show it does. I need to test it works for addresses that are normally then forwarded on to an Exchange server behind the firewall.
Though rather than REJECTing/DISCARDing them... I was looking to store them for a while to study what sort of spam we were receiving.
http://www.akadia.com/services/sendmail_relay.html
http://www.faqs.org/docs/securing/chap22sec178.html
alex at nkpanama.com wrote:
> ajos1 at onion.demon.co.uk wrote:
> > ============================================
> > Definite Spam Is High Scoring = %rules-dir%/ajos1.spamblacklist.rules
> >
> From the config file:
> # Setting this to yes means that spam found in the blacklist is treated
> # as "High Scoring Spam" in the "Spam Actions" section below. Setting it
> # to no means that it will be treated as "normal" spam.
> # This can also be the filename of a ruleset.
>
> But you don't have a blacklist. You have a list that states whether or
> not spam that's in your (blank) blacklist should be tagged as high
> scoring spam. The fact that you *call it* a blacklist doesn't make it one.
>
> > High Scoring Spam Actions = store forward spamd at tbshs.herts.sch.uk
> >
> >
> And as such only high scoring spam (not everything) will be forwarded.
> > In my: /etc/MailScanner/rules/ajos1.spamblacklist.rules I have
> > ==============================================================
> > ##############################################################################
> > ####
> > #### AJOS1.SPAMBLACKLIST.RULES (Make these high scoring spam)
> > #### =========================
> > #### We are getting too much rubbish... so we need to get rid off alot of
> > #### it... this file we are ESPECIALLY dealing with old users...
> > ####
> >
> Wouldn't it be easier to block old users at the MTA level?
> > ##############################################################################
> > FromOrTo: ajos1 at tbshspx2.tbshs.herts.sch.uk yes
> > FromOrTo: paf at tbshs.herts.sch.uk yes
> > To: adc@* yes
> > To: aeg@* yes
> > To: pas@* yes
> > To: pcn@* yes
> > To: sge@* yes
> > FromOrTo: default no
> >
>
More information about the MailScanner
mailing list