It's best to use DNSBL /(DNS Block Lists)/ for this, because then you don't need to update these yourself: e.g. that particular IP address is already listed on all three block lists at uceprotect.net.  These work in the same way as a DNS reverse look-up but instead of returning a domain name, the result is a value depending on whether or not that particular DNSBL is listing the originating IP address as a suspected source of spam.

Use the following in your exim.conf, in the acl_check_rcpt section:

deny    message       = GOODBYE!!! $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text         dnslists      = dnsbl-1.uceprotect.net : dnsbl-2.uceprotect.net : dnsbl-3.uceprotect.net

I also use other DNSBLs, just add the ones you want to use to the dnslists entry.

On 06/06/2022 23:18, The Doctor via Exim-users wrote:
Just going over my spam and I find this IP 195.133.39.99

sending a lot of junk.  How can you block such a class C?
--
footer
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to