Re: [exim] Preventing Sender Forgery .

Oliver von Bueren wrote:
> As I wrote in my mail, this is only a small portion of what I do in my

I understand.

> So my simple policies for accepting mail are:
> 0. HELO/EHLO abuse
> 1. Never relay mail without AUTH
> 2. Prevent abuse of local_domains as sender, only allow on AUTH sessions
> 3. RBLs, ...
> 4. Sender verify
> 5. Content analysis (might be SA, but can be simpler stuff as well)

It looks like you don't have greylisting, I believe adding it as your
first check will prove to be very effective. It's an inexpensive check
and will likely block more than 90% of your spam, which includes many
forged emails.

Greetings,
Jeroen