We have become very aggressive in our black listing of e-mails. These
are the following lists.
# address is in various spam blacklist - so rejected
deny message = rejected because \
$sender_host_address is in a black list at \
$dnslist_domain\n$dnslist_text
dnslists = rbl-plus.mail-abuse.ja.net : \
sbl.spamhaus.org : \
opm.blitzed.org : \
cbl.abuseat.org : \
list.dsbl.org : \
dnsbl.njabl.org : \
web.dnsbl.sorbs.net : \
zombie.dnsbl.sorbs.net : \
nomail.rhsbl.sorbs.net : \
dynablock.njabl.org
We are also doing SpamAssassin in the gateway (which is under heavy
attack). We are not using razor or DCC. The SA is not available for
use to individual users.
- Sujit
>-----Original Message-----
>From: Dennis Skinner [mailto:dskinner@bluefrog.com]
>Sent: 13 February 2004 15:05
>To: Sujit Choudhury
>Cc: Alex Lomas; exim-users@???
>Subject: RE: [Exim] How to deal with 10 fold increase in mail traffic
>
>
>On Fri, 2004-02-13 at 09:34, Sujit Choudhury wrote:
>> Alex,
>> The problem is our MTA is a gateway. It handles the traffic for
>> m25lib.ac.uk, psi.org.uk etc. It does not have local users.
>> Depending on various rewrite rules, it just passes the mail to some
>> other (less
>> powerful) host.
>>
>> So the ACL you have suggested will not work easily.
>
>The best thing to do would be to get exim access to your userlist.
>
>Barring that, you should tune SA so it catches these spam
>messages instead of passing them to the smaller mailservers.
>Are you using razor and/or DCC?
>
>You also should probably look into RBL's. Our servers deliver
>about 140k mails per day. Spamhaus' SBL blocks another 50-60k
>msgs before delivery. ORDB, catches another 3-5k.
>
>--
>Dennis Skinner
>Systems Administrator
>BlueFrog Internet
>http://www.bluefrog.com
>
>