Hi Roland, Thanks for so much information.
> > However, there is still a huge amount of bounces that > > are generated and are stuck in the queue. I can see, by > > manually diagnosing, that so much of that is bounces to > > "forged or innocent senders", but I don't know of a way > > to effectively determine whether a bounce is legitimate > or not. > > Too bad courier cant reject based on non-resolvable helo, > this would kill away all the Sobig, and many other trojans > and proxy-spam. The simple patch published a few days ago > will take care of them. If your perlfilter also parses the > controlfile you could extract the helostring from there. Yes, the perlfilter does parse the control file... as far as the helo string, what should I do with that? What should I check for? > > Use a couple of DNSBL, especially those listing open > proxies, dialups and adsl-/cable ranges, add the rdns of > the remaining worst home- providers as wildcards to > etc/smtpaccess, adding a few notorious /8 or countries > also helps - depending on your geographic location and > your customers. Also use the freemail-feature of etc/bofh > to get rid of the most forged domains, start with Yahoo, > MSN, Hotmail. Great... any pointers on how to set that up efficiently? As for the DNSBL, can someone provide a good, updated list of DNSBL servers? I used to have one but it's outdated. Ricardo ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
