[exim] Spammers ignoring MX

Hi all,

I have a number of domains that the MX is set to an outside spamfiltering server. These domains are still getting spam that is being sent directly to our servers, thus bypassing the spamfiltering.

Now in order for use to accept email from the spamfiltering service, I need to accept mail for that domain.

Is there a was to tell the mailserver to only accept mail for those domains that comes from specific hosts?

-GrantFrom mfs@??? Thu Feb 05 21:07:14 2009
Envelope-to: exim-users@???
Received: from relay1-1.techevolution.com ([208.64.163.101]:53783)
    by tahini.csx.cam.ac.uk with esmtp (Exim 4.69)
    (envelope-from <mfs@???>) id 1LVBRC-0001M4-Op
    for exim-users@???; Thu, 05 Feb 2009 21:07:13 +0000
Received: from apollo.techevolution.com [208.64.163.11]
    by relay1.techevolution.com with esmtp (Exim)
    id 1LVBRB-0004jp-9O; Thu, 05 Feb 2009 16:07:05 -0500
Received: (qmail 6650 invoked from network); 5 Feb 2009 16:07:12 -0500
Received: from ip38-112-148-99.bizland-inc.com (HELO ?192.168.2.219?)
    (38.112.148.99)
    by apollo.techevolution.com with (DHE-RSA-AES256-SHA encrypted) SMTP;
    5 Feb 2009 16:07:12 -0500
Message-ID: <498B54EB.4010209@???>
Date: Thu, 05 Feb 2009 16:06:51 -0500
From: Mike Sprague <mfs@???>
Organization: SaNE, Inc
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
    rv:1.8.1.19) Gecko/20090105 Thunderbird/2.0.0.19 Mnenhy/0.7.5.666
MIME-Version: 1.0
To: exim-users@???
References: <18477BDD74B54E20BD8CDE5B531841F2@GRANTLAPTOP>
In-Reply-To: <18477BDD74B54E20BD8CDE5B531841F2@GRANTLAPTOP>
Content-Type: text/plain; charsetãO-8859-1
Content-Transfer-Encoding: 7bit
X-Outgoing-Scanned-By: relay1.techevolution.com Thu, 05 Feb 2009 16:07:05 -0500
X-Spam-Score: -2.7 (--)
X-Spam-Status: No, scoreÒ.7 required~0 testsºYES_00Ñ.5,
    EXIM_ACLÑ.2 autolearnŠm version^1.8
Subject: Re: [exim] Spammers ignoring MX
X-BeenThere: exim-users@???
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: A user list for the exim MTA <exim-users.exim.org>
List-Unsubscribe: <http://lists.exim.org/mailman/listinfo/exim-users>,
    <mailto:exim-users-request@exim.org?subject¾subscribe>
List-Archive: <http://lists.exim.org/lurker/list/exim-users.html>
List-Post: <mailto:exim-users@exim.org>
List-Help: <mailto:exim-users-request@exim.org?subjectŽlp>
List-Subscribe: <http://lists.exim.org/mailman/listinfo/exim-users>,
    <mailto:exim-users-request@exim.org?subject¥bscribe>
X-List-Received-Date: Thu, 05 Feb 2009 21:07:14 -0000

Grant Peel wrote:
> Hi all,
>
> I have a number of domains that the MX is set to an outside
> spamfiltering server. These domains are still getting spam that is
> being sent directly to our servers, thus bypassing the spamfiltering.
>
>
> Now in order for use to accept email from the spamfiltering service,
> I need to accept mail for that domain.
>
> Is there a was to tell the mailserver to only accept mail for those
> domains that comes from specific hosts?
>
> -Grant

You can do something like this in the ACLs. I do it in the check_rcpt ACL:

require
  message     only accept messages from certain servers
  hosts       ?92.168.1.25

Put the IP(s) of your spamfiltering service instead of 192.168.1.25 and
it will only accept messages from them.

Thanks,
mikeS

--
Michael F. Sprague     | System and Network Engineering (SaNE), Inc
mfs@???        | http://www.saneinc.net