On Monday 11 August 2003 11:39, Gordon wrote: > Ed Wilts wrote: > > On Mon, Aug 11, 2003 at 11:41:15AM -0400, Gordon wrote: > >>I've noticed that in most of the spam that makes it through the > >> sender uses a from address of something legitimate like aol.com or > >> msn.com or whatever. I already block email if the domain doesn't > >> exist at all. Can anyone tell me if it's possible (any prefereably > >> how) to have sendmail reject the connection if the from address is > >> aol.com but the mail server isn't aol.com (likewise for msn, > >> yahoo, etc.). > > > > Please note that if you implement this, you have the potential to > > block a *lot* of legitimate e-mail. For example, this e-mail is > > coming to you from the redhat.com domain, yet it's got my From: > > address on it. It's quite possible for a legitimate user to send > > e-mail from a different domain. Even if I sent e-mail directly to > > you, I've got a SMART_HOST defined that will send it to you via my > > ISP, yet keep my ewilts.org From: address (and I host multiple > > domains on my home server). > > This is for my home mail server so me and my housemate are the only > ones who could get lost mail. I've been keeping track of the spam > that I do get and only planned to check for the 3 or 4 domains that > are most prevalent in the from address, not a general rule for all > domains. Well, here is one thread on goolge that discusses doing this on particular domains rather than the general case:
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=693c8ac8.0205311953.6e998e91%40posting.google.com&rnum=40&prev=/groups%3Fq%3Dspam%2Bforged%2Breject%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%2Bgroup:comp.mail.sendmail%26start%3D30%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26group%3Dcomp.mail.sendmail%26scoring%3Dd%26selm%3D693c8ac8.0205311953.6e998e91%2540posting.google.com%26rnum%3D40 Found via search terms: "spam forged reject group:comp.mail.sendmail" Regards, Mike Klinke -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
