Oliver Egginger пишет:
>> Use of this "intelligent" behavior of MTA we can handle mail 
>> transactions more accuracy. This is very simple and efficient way.
> 
> We use a similar approach. I wouldn't call it "simple". I wouldn't call
> it "\"intelligent\"". It's simply hard work. We combine asn, hostname,
> rbl and helo tests, dns adress verifikation and several other sanity
> checks in the pre data phase. Nevertheless, a lot of spam and malware
> pass through. Only a (full featured) spamassassin in conjunction with
> clamAV is able to clean it up.

Yor just not understand the basic terms of my post. Or, maybe, my English so 
bad, that it is hard to understand what I 
write. :-)

I never say "Do not use bayesian filters!".
I never say "Do not use antivirus!"

As about "intelligence":
Three of four check is not "intelligence behavior", but ~20 tests + greylisting 
+ challengelisting + blacklisting + 
whitelisting and using the MTA logic to manipulate of all of this is really 
intelligence.

 > Nevertheless, a lot of spam and malware
 > pass through.

Try to use a well-known construction, just above virus checking in Exim 
configuration:

acl_check_mime:

   warn    decode         = default
   drop    message        = Blacklisted file extension detected.
           condition      = ${if 
match{${lc:$mime_filename}}{\N(\.cpl|\.pif|\.bat|\.scr|\.lnk|\.com|\.hta)$\N}{1}{0}}

   accept

You would be surprised, the volume of viruses will decrease about a half.

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to