On Thu, Jan 18, 2007 at 11:27:29AM -0500, Martin wrote:
> I'm using spamd but am noticing that some SPAM is still coming though

Me, too. But spamd stops over 90% with minimal overhead.

> dig mx tnnb.com
> 
> <SNIP>
> 
> ;; ADDITIONAL SECTION:
> mx1.tnnb.com.           3600    IN      A       208.217.213.106
> 
> So obviously the IP 63.111.223.194 does not belong to a tnnb.com mail server 
> and can be blacklisted/tarpitted.

This turns out not to be the case. MX records tell you where to send
mail TO that domain, and have nothing to do with mail FROM that domain.
While the TO/FROM servers are often the same, they are also often not
the same, especially for large providers.

Some domains provide SPF records in dns, and you can incorporate spf
checks into your MTA, SpamAssassin, etc.

-- 
Darrin Chandler            |  Phoenix BSD Users Group
[EMAIL PROTECTED]   |  http://bsd.phoenix.az.us/
http://www.stilyagin.com/  |

Reply via email to