Marc Perkel wrote:
> Anyhow - one of my tricks. Create a third MX that is higher than the 
> other two. Then add this ACL
>
> defer    log_message = Spammer Connected to FAKE highest MX record
>         condition = ${if 
> match{$interface_address}{69.50.231.7}{true}{false}}

Not wishing to be pedantic, but it's not a fake record, it's a real 
one.  Also it's perfectly possible that it's not a spammer, but a host 
that is having trouble reaching your primary MX.  You logic assumes that 
a spammer will always and only try the lowest priority MX record, that's 
unlikely to be universally correct.

Regards

-- 

Martin A. Brooks |  http://www.antibodymx.net/ | Anti-spam & anti-virus
   Consultant    |  [EMAIL PROTECTED]      | filtering. Inoculate
 antibodymx.net  |  m: +4745888254             | your mail system.


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to