how to prevent fake email to enter my domain?

[Res]

You should use a helo check, if you use sendmail use the block_bad_helo 
hack for 8.13.x,   8.14.x will have this as a feature, along with require 
rdns.

for spf, use milters and comment it out in SA ( no point in dbl lookups)

On Fri, 26 Jan 2007, Jorge Costinha wrote:

> i receive a lot of spam mask as internal email, as if someone within my network send it, but in fact is just spam, from outside.
> i figure i could solve effectively just with spam.whitelist.rules and spam.blacklist.rules, for some reason i can't understand it only works with some emails.
>
> here what i did, whitelist is checked first, if rule matches it skips the remaining rules and blacklist aswell:
>
> on spam.whitelist.rules:
>
> From:	192.168.10.	yes
>
> on spam.blacklist.rules:
>
> From: *@mydomain.com  yes
>
>
> any internal email will match the rule on Whitelist, so it never gets rejected in blacklist. if its fake, it wont match the ip address and it only matches the blacklist.
> when i did this, almost all fake email was detected, however some aren't. is there something i miss in here? is there a better approach?
> also regarding SPF records, mailscanner doesnt handle SPF?
>
> thanks!
> __
> Jorge Costinha
>

-- 
Cheers
Res

"So, you think you can tell Heaven from Hell?" - Roger Waters