Re: [exim] Duplicate emails

schmerold2@??? wrote:
> It does seem like we are going to need to beef up the Exim hardware and
> perhaps go to local RBL.
>
>

Not necesarily.

See if you can do this first:

- if you dare, grant the 'trusted' incoming exemptions and with an 'endpass'

- Insure the 'cheap' tests with the highest success rate come first.

Ex:

- chronic-offender? place the IP/range in ipfw or pf

Exim:

- IP-based LWL

- IP-based LBL

- rDNS lookup

- dynamic IP RBL


etc...

THEN:

- configure SA (if used) to do NO Bayes, NO AWL, NO IP, DNS, DK/DKIM, SPF
tests. Basically NO callouts *of any kind*, just header eval and body analysis.

Exim has already done the other ones that matter.

Bill


>
> Lena@??? wrote:
>>> From: schmerold2@gmail
>>> We are getting duplicate emails. It seems to be the same senders,
>>> however not every one of their emails duplicate. 5% of mails from
>>> Charter.net will duplicate, 10% of mails from Cox will duplicate, 100%
>>> of mails from Interfax.net will duplicate.
>>> spamd_address = 127.0.0.1 783
>> I guess that your spam-filter queries some RBL, and one or more of them
>> timeout because dead or for paying customers only.
>> Try switch spam-filtering via spamd off temporarily.
>> If that doesn't help then try to switch virus-filtering off temporarily.
>>
>