Ok, thanks. I'll look up acl_smtp_data in the Exim docs to get my
bearing, and hopefully find a way of testing it before it becomes active.
Sascha wrote: > As already pointed out: It's time to get rid of the catchall.
> It's bad karma ;)
I'm afraid it's too late, I've used it over the last 5 years, and didn't
keep track of all the addresses used.
Spamassassin (once trained, and using razor & spamcop) is doing a great
job of dealing with spam, I just hadn't considered the problem of
bounces to fake reply addresses.
Thanks for the link though, I do manage a few domains on that box, so
I'll have a look.