BlackList - Something simple

ajos1 at onion.demon.co.uk ajos1 at onion.demon.co.uk
Sun Apr 16 23:30:38 IST 2006


-

Yes that makes sense now... I was confused by the fact it said: "This can also be the filename of a ruleset."

I am a silly billy...

I have found out how to do it at MTA level now... and will see if it works... initial tests show it does. I need to test it works for addresses that are normally then forwarded on to an Exchange server behind the firewall.

Though rather than REJECTing/DISCARDing them... I was looking to store them for a while to study what sort of spam we were receiving.

http://www.akadia.com/services/sendmail_relay.html
http://www.faqs.org/docs/securing/chap22sec178.html


alex at nkpanama.com wrote:
> ajos1 at onion.demon.co.uk wrote:
> > ============================================
> > Definite Spam Is High Scoring = %rules-dir%/ajos1.spamblacklist.rules
> >   
>  From the config file:
> # Setting this to yes means that spam found in the blacklist is treated
> # as "High Scoring Spam" in the "Spam Actions" section below. Setting it
> # to no means that it will be treated as "normal" spam.
> # This can also be the filename of a ruleset.
> 
> But you don't have a blacklist. You have a list that states whether or 
> not spam that's in your (blank) blacklist should be tagged as high 
> scoring spam. The fact that you *call it* a blacklist doesn't make it one.
> 
> > High Scoring Spam Actions = store forward spamd at tbshs.herts.sch.uk
> >
> >   
> And as such only high scoring spam (not everything) will be forwarded.
> > In my: /etc/MailScanner/rules/ajos1.spamblacklist.rules I have
> > ==============================================================
> > ##############################################################################
> > ####
> > #### AJOS1.SPAMBLACKLIST.RULES   (Make these high scoring spam)
> > #### =========================
> > #### We are getting too much rubbish... so we need to get rid off alot of
> > #### it... this file we are ESPECIALLY dealing with old users...
> > ####
> >   
> Wouldn't it be easier to block old users at the MTA level?
> > ##############################################################################
> > FromOrTo:       ajos1 at tbshspx2.tbshs.herts.sch.uk       yes
> > FromOrTo:       paf at tbshs.herts.sch.uk  yes
> > To:             adc@*           yes
> > To:             aeg@*           yes
> > To:             pas@*           yes
> > To:             pcn@*           yes
> > To:             sge@*           yes
> > FromOrTo:       default         no
> >   
> 
 



More information about the MailScanner mailing list