heloo
The solution is actually simple, but the question is why do such emails come in if authentication and SSL are set? And in this case, wouldn't it be blocking sending a message to yourself?
regards
----- Original Message ----- From: "Oleksandr Kryvulia via Exim-users" <[email protected]>
To: <[email protected]>
Sent: Friday, October 25, 2024 11:00 AM
Subject: [exim] Re: Spam problem


25.10.24 00:27, Sławomir Dworaczek via Exim-users:
recently I receive a lot of spam that looks like it was sent from my address to my address
I added to the configuration:
set acl_m0 = authorizedrelay

deny
message = 5.7.0 You can't spoof the domains this server is authorative
for
sender_domains = ^(?i).*(mydomain.pl)\$

deny
message = 5.7.0 You can't spoof the MIME From this server is authorative
for
condition = ${if match
{$h_from:}{(?i)@([a-zA-Z0-9_.\\-]*\\.)?(mydomain.pl)}{yes}{no}}
condition = ${if eq {$acl_m0}{authorizedrelay}{no}{yes}}
unfortunately it didn't help
What else can I do?

below source Return-path: <[email protected]> Envelope-to: [email protected] Delivery-date: Thu, 24 Oct 2024 11:17:48 +0200 Received: from exim by mydomain.com with bogodone (Exim 4.98) (envelope-from <[email protected]>) id 1t3tyV-0000 00000Qb-0i1j for [email protected]; Thu, 24 Oct 2024 11:17:48 +0200 Received: from fixed-189-203-51-194.totalplay.net ([189.203.51.194]) by mydomain.com with esmtp (Exim 4.98) (envelope-from <[email protected]>) id 1t3tyc-0000 00000PD-3FGa for [email protected]; Thu, 24 Oct 2024 11:17:47 +0200 From: <[email protected]> To: <[email protected]> Date: 23 Oct 2024 19:50:36 -0700 MIME-Version: 1.0 Subject: No reply. Message-ID: <[email protected]> Priority: normal X-mailer: Pegasus Mail for Windows (4.41) Content-type: multipart/alternative; boundary="Alt-Boundary-89712.1329582" X-Spam-Bar: ++++++ X-Bogofilterd: true charset="ibm852" Content-transfer-encoding: QUOTED-PRINTABLE Content-description: Mail message body


We have this simple check:

accept authenticated = *
 condition = ${if eq{$received_port}{587} }
 control = submission/sender_retain
......
deny hosts = !+relay_from_hosts
 domains = +local_domains
 condition = ${if or{ { eq{$sender_address}{$local_part@$domain} }\
 { eq{$sender_address_domain}{$domain} } } }
message = The same local addresses or domain in MAIL FROM and RCPT TO from nonlocal relay

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/



--
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to