Re: [Exim] spam with forged from:

Top Page
Delete this message
Reply to this message
Author: Suresh Ramasubramanian
Date:  
To: exim-users
Subject: Re: [Exim] spam with forged from:
+++ Yura Pismerov <Sunday 09 June 2002 07:22 am>:
> As you understand our mail relay allow relaying to everything that sent
> to our domain.


That would be a local delivery, or be delivered onwards to whevever you have
set exim to route the mail to (say an exchange or notes server).

> We have SMTP AUTH in place, but it does not help in this case since it
> is only being triggered when the To: field is something non-local.


Auth is when the spammer wants to send mail through your box to (say) mail.com

> I'd like to set up Exim to force SMTP AUTH in case when From: AND To:
> headers contain our local domains. Is that possible ?


If you want to stop incoming spam to your domains the best way to go is to use
a set of DNSBLs. Try the combination (or as much of it as you can stand) at
http://spamblock.outblaze.com/spamchk.html

    -srs


--
Suresh Ramasubramanian  <---->  mallet <at> efn dot org
EMail Sturmbannfuhrer, Lower Middle Class Unix Sysadmin
[Linux One Stanza Tip]    From : <bish@???>
LOST #017     -**< Sub : Additional consoles >**-
To add more consoles to the default 6, edit /etc/inittab. To
lines looking like this:
6:23:respawn:/sbin/getty tty6    | Do not cross 11 because
                                 | the last free tty is
... append something like:       | needed by X. Anyway,
7:23:respawn:/sbin/getty tty7    | for most boxes, 10 is
8:23:respawn:/sbin/getty tty8    | good enough