[email protected] wrote:
> It does seem like we are going to need to beef up the Exim hardware and 
> perhaps go to local RBL.
> 
> 

Not necesarily.

See if you can do this first:

- if you dare, grant the 'trusted' incoming exemptions and with an 'endpass'

- Insure the 'cheap' tests with the highest success rate come first.

Ex:

- chronic-offender? place the IP/range in ipfw or pf

Exim:

- IP-based LWL

- IP-based LBL

- rDNS lookup

- dynamic IP RBL


etc...

THEN:

- configure SA (if used) to do NO Bayes, NO AWL, NO  IP, DNS, DK/DKIM, SPF 
tests. Basically NO callouts *of any kind*, just header eval and body analysis.

Exim has already done the other ones that matter.

Bill


> 
> [email protected] wrote:
>>> From: schmero...@gmail
>>> We are getting duplicate emails. It seems to be the same senders, 
>>> however not every one of their emails duplicate. 5% of mails from 
>>> Charter.net will duplicate, 10% of mails from Cox will duplicate, 100% 
>>> of mails from Interfax.net will duplicate.
>>> spamd_address = 127.0.0.1 783
>> I guess that your spam-filter queries some RBL, and one or more of them
>> timeout because dead or for paying customers only.
>> Try switch spam-filtering via spamd off temporarily.
>> If that doesn't help then try to switch virus-filtering off temporarily.
>>
> 


-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to