[...]

 Content preview:  On 10/25/2011 2:35 PM, Ronaldo Luiz de Carvalho wrote: > All
    accounts are AUTHed. > > There are a way to block the connections using domain?
    I tried the filter > below but doesn't work. > > > domainlist exim_blacklist
    = lsearch;/etc/eximblacklist > > reject_domains: > > driver = redirect >
   # RBL Blacklist incoming hosts > domains = +exim_blacklist > allow_fail >
   data = :fail: Connection rejected: SPAM source $domain is manually > blacklisted.
    > > > > > > -----Mensagem original----- > De: exim-users-bounces+ronaldol=cybernet.com.br@???
    > [mailto:exim-users-bounces+ronaldol=cybernet.com.br@exim.org] Em nome de
    > Jeremy Harris > Enviada em: terça-feira, 25 de outubro de 2011 18:21 >
   Para: exim-users@??? > Assunto: Re: [exim] How to Block connection >
   > On 2011-10-25 16:35, Ronaldo Luiz de Carvalho wrote: >> -received_protocol
    esmtpa > They're AUTHed ? > > Find out what account they're using to AUTH
    as and disable it. [...] 

Content analysis details: (-49.9 points, 7.9 required)

  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  -48 ALL_TRUSTED            Passed through trusted hosts only via SMTP
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
X-Spam-Score: -1.9 (-) 
X-Spam-Status: No, score=-1.9 required=5.0 tests=AWL=1.075, BAYES_00=-1.5,
    EXIM_ACL=-1.2, EXIM_DRIVER=-1, EXIM_EXP_VAR=-1,
    RATWARE_GECKO_BUILD=1.691 autolearn=ham version=3.1.8
Subject: Re: [exim] RES:  How to Block connection
X-BeenThere: exim-users@???
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: A user list for the exim MTA <exim-users.exim.org>
List-Unsubscribe: <https://lists.exim.org/mailman/options/exim-users>,
    <mailto:exim-users-request@exim.org?subject=unsubscribe>
List-Archive: <https://lists.exim.org/lurker/list/exim-users.html>
List-Post: <mailto:exim-users@exim.org>
List-Help: <mailto:exim-users-request@exim.org?subject=help>
List-Subscribe: <https://lists.exim.org/mailman/listinfo/exim-users>,
    <mailto:exim-users-request@exim.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Oct 2011 02:01:22 -0000

On 10/25/2011 2:35 PM, Ronaldo Luiz de Carvalho wrote:
> All accounts are AUTHed.
>
> There are a way to block the connections using domain? I tried the filter
> below but doesn't work.
>
>
> domainlist exim_blacklist = lsearch;/etc/eximblacklist
>
> reject_domains:
>
> driver = redirect
> # RBL Blacklist incoming hosts
> domains = +exim_blacklist
> allow_fail
> data = :fail: Connection rejected: SPAM source $domain is manually
> blacklisted.
>
>
>
>
>
> -----Mensagem original-----
> De: exim-users-bounces+ronaldol=cybernet.com.br@???
> [mailto:exim-users-bounces+ronaldol=cybernet.com.br@exim.org] Em nome de
> Jeremy Harris
> Enviada em: terça-feira, 25 de outubro de 2011 18:21
> Para: exim-users@???
> Assunto: Re: [exim] How to Block connection
>
> On 2011-10-25 16:35, Ronaldo Luiz de Carvalho wrote:
>> -received_protocol esmtpa
> They're AUTHed ?
>
> Find out what account they're using to AUTH as and disable it.


This works very well for me

#blacklist_host

deny message = sender IP address $sender_host_address is locally
blacklisted here. If you think this is wrong, get in touch with
postmaster SPAMMERS SUCK

                  hosts = ${if exists{/etc/xxxx/blacklist_ip}\
                              {/etc/exim/blacklist_ip}\
                            {}}

And as a fall back I use the Spamassassin preference file to also add wl
and bl users.
Start it with

blacklist_from user@???
or
whitelist_from user2@???