I don't reject invalid HELO's or invalid rDNS and get very Little spam, because I just ban all those shitty TLDs. I have found out that most spam uses those new shitty TLDs so just banning these shitty TLDs in the MIME from and MAIL from is a good solution:
MAIL from stage: deny message = Banned TLD sender_domains = ^(?i).*\\.(study|reise|technology|club|fun|bid|store|top|xyz|pro|date|faith|stream|host|loan|download|click|link|science|design|gdn|men|win|party|webcam|rocks|email|life|ninja|online|racing|review|site|trade|vividal|website|works|work|cricket|help|camera|computer|space|uno|tech|news|space|guru|berlin|photography|global|today|solutions|media|world|university|shop)\$ then one for Mime from stage: deny message = Banned TLD in MIME From ($h_from:) condition = ${if match {$h_from:}{^(?i).*\\.(study|reise|technology|club|fun|bid|store|top|xyz|pro|date|faith|stream|host|loan|download|click|link|science|design|gdn|men|win|party|webcam|rocks|email|life|ninja|online|racing|review|site|trade|vividal|website|works|work|cricket|help|camera|computer|space|uno|tech|news|space|guru|berlin|photography|global|today|solutions|media|world|university|shop)>\$}{yes}{no}} That solves most current spam problems. 2018-05-26 23:24 GMT+02:00 Always Learning via Exim-users <exim-users@exim.org>: > > On Sat, 2018-05-26 at 09:03 +0200, Luca Bertoncello wrote: > >> Well, unfortunately this address catches many Spam/junk E-Mails and, of >> course, my Exim (4.88) tries to forward them. >> Virus are blocked and will __NOT__ be forwarded, but Spam is some other and, >> of course, I cannot be sure if an E-Mail is Spam or not, so I have to forward >> it... > > I disagree, based on my 9? years of happy, contented and grateful usage > of Exim. > > If you reject emails from MTAs having no rDNS or no resolving HELO (or > EHLO) names or having a HELO name that is different from the sending > MTA's host name, most of your spam will not reach your users. > > I then take additional Exim-based spam-repulsion activities and only get > ONE spam perhaps every few weeks, despite having 5 incoming MTAs in 3 > countries. > > Do not do nothing and let yourself become a willing victim of spam. > > > -- > Kind regard, > > Paul. > England, EU. England's place is in the European Union. > > > -- > ## List details at https://lists.exim.org/mailman/listinfo/exim-users > ## Exim details at http://www.exim.org/ > ## Please use the Wiki with this list - http://wiki.exim.org/ -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/