Andy Firman wrote: > I love the block_hosts feature and it's always worked very well, until the > Russian spammers (coming out of ruvds.com) started doing something > different. > > This is in my block_hosts file: 194.87.0.0/16
What that does depends on your Exim configuration, but most implementations will deny connections or mails sent from one of these hosts. > My question is, why is the block_hosts not working here? > > Is the *194.87.207.175* too deep into the headers for Exim to block? That depends on your configuration, but mostly only _direct_ connections from hosts in block_hosts will be blocked. Filtering on mail headers (and body) is mostly done in spam filtering software like SpamAssassin, rspamd and others. You should keep in mind that all Received: headers can be completely fake. You may well trust those added by Google, but you can't know if those headers "deeper in" are correct. And, lastly, blocking by IP address is very broad. 194.87.0.0/16 does not only comprise "Russian spammers", but networks from the US and some European conutries, too. -thh -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
