More spam :-( Was Re: [Mailman-Users] Would you like to receive information on registering your pet online for free?

[Marc MERLIN]

On Mon, Mar 26, 2001 at 06:12:54PM -0500, Barry A. Warsaw wrote:
> Third, there are certain spam filters that the MTA can apply that
> should catch more stuff.  I thought that the Exim installation on
> {python,zope}.org was all hooked up to RBL, etc., but since spam is
> getting through, it may not be working.  I'm hoping Ethan, our MTA
> administrator can give more information here.

This, when use in exim, will cut down on a lot of spam (used on sf.net):
(you need exim 3.2x for sender_verify_hosts_callback)

----------------------------------------------------------------------------
# Blackhole lists
rbl_domains = dialups.mail-abuse.org/reject : relays.mail-abuse.org/reject : bla
ckholes.mail-abuse.org/reject

# Refuse senders with bad envelope senders
sender_verify = true
sender_verify_reject = true

# Let's not verify anything coming from mailman
sender_verify_hosts = !127.0.0.1/8:0.0.0.0/0
receiver_verify_hosts = !127.0.0.1/8:0.0.0.0/0

# Enabling this would accept a bad envelope sender if the header sender is ok
# sender_verify_fixup = true

# Even better: refuse senders that do not exist (by asking the remote mail
# server). This adds a little load, but it's awesome -- Marc
sender_verify_hosts_callback = !127.0.0.1:!10.0.0.0/8:!*.sourceforge.net:/etc/mail/checksender/badsendinghosts:*
sender_verify_callback_domains = !sourceforge.net:!users.sourceforge.net:/etc/ma
il/checksender/baddomains:*
# Wait up to 90s for the remote mail server to answer
sender_verify_callback_timeout = 90s


# And if you are a true BOFH:
# Refuse messages with bad headers
headers_check_syntax = true
headers_sender_verify = true
headers_checks_fail = true
----------------------------------------------------------------------------

Marc
-- 
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
  
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key